base/frameworks/input/readers/sqlite.bro

InputSQLite

Interface for the SQLite input reader. Redefinable options are available to tweak the input format of the SQLite reader.

See Logging To and Reading From SQLite Databases for an introduction on how to use the SQLite reader.

When using the SQLite reader, you have to specify the SQL query that returns the desired data by setting query in the config table. See the introduction mentioned above for an example.

Namespace:InputSQLite Source File:/scripts/base/frameworks/input/readers/sqlite.bro

Summary

Redefinable Options

InputSQLite::empty_field: string &redef	String to use for empty fields.
InputSQLite::set_separator: string &redef	Separator between set elements.
InputSQLite::unset_field: string &redef	String to use for an unset &optional field.

Detailed Interface

Redefinable Options

InputSQLite::empty_field

Type:string Attributes:&redef Default:"(empty)"

String to use for empty fields.

InputSQLite::set_separator

Type:string Attributes:&redef Default:","

Separator between set elements. Please note that the separator has to be exactly one character long.

InputSQLite::unset_field

Type:string Attributes:&redef Default:"-"

String to use for an unset &optional field.