Commit Graph

6 Commits (376eddbe98e3d683fcc87d2b595e230ce1188a97)

Author SHA1 Message Date
Philippe Antoine 273e9f55eb scripts: eve-parity hard fail on unknown keyword 8 months ago
Philippe Antoine f581b8f1ae scripts: complete eve-parity type check 8 months ago
Jason Ish facd525692 eve-parity: merge $ref props into current object
Allows for a "suricata" entry along with a "$ref".
1 year ago
Jason Ish 744f301df4 eve-parity: handle arrays of scalars
And add an example with "client_alpns".
1 year ago
Jason Ish 6477b31199 eve-parity: skip transform keywords 1 year ago
Jason Ish 861896ed39 script/eve-parity: add script for checking eve/keyword parity
Currently this script has two commands: "missing" and "having".

"missing" will show eve fields that do not map to any keywords.

"having" will sohw eve fields along with their keyword mappsings,
while also validating that those keywords really exist.

Related to tickets: #6463, #4772
1 year ago