summaryrefslogtreecommitdiffstats
path: root/runtime
Commit message (Collapse)AuthorAgeFilesLines
...
* | | | | | bugfix: invalid debug message for normal operationRainer Gerhards2012-09-191-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | had no effect except on debug log
* | | | | | bugfix: debug output indicated improper queue typeRainer Gerhards2012-09-191-0/+4
| | | | | |
* | | | | | Implement ability for CEE-based properties to be stored in disk queuesRainer Gerhards2012-09-191-0/+12
| | | | | |
* | | | | | bugfix: MsgDup() did not copy CEE structureRainer Gerhards2012-09-191-1/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This function was called at various places, most importantly during "last messages repeated n times" processing and omruleset. If CEE(JSON) data was present, it was lost as part of the copy process.
* | | | | | clarify: NO memleak, json_object_object_del() reduces reference countRainer Gerhards2012-09-181-2/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | json-c upstream made this clear some posts later in the discussion that I was refering to.
* | | | | | new ruleengine: do a deep copy for "set" statement affecting JSON treeRainer Gerhards2012-09-181-1/+50
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Otherwise, further modifications will modify the original and "copied" JSON tree.
* | | | | | new ruleengine: implement native JSON in RainerScriptRainer Gerhards2012-09-181-0/+3
| | | | | |
* | | | | | cleanupRainer Gerhards2012-09-182-559/+0
| | | | | |
* | | | | | new ruleengine: implement template type "subtree"Rainer Gerhards2012-09-184-11/+42
| | | | | |
* | | | | | Merge branch 'master-newruleset'Rainer Gerhards2012-09-174-16/+142
|\ \ \ \ \ \
| * | | | | | new ruleengine: couple of fixes to new codeRainer Gerhards2012-09-171-4/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - memory leak if container was tried to replace - too early free due to invalid reference counting - performance improvement for set statement
| * | | | | | new ruleengine: Implent "unset" statementRainer Gerhards2012-09-174-7/+72
| | | | | | |
| * | | | | | Implement set config stmt (initial version)Rainer Gerhards2012-09-133-13/+67
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | code passes basic tests, no extended testing done. Definitely room for improvement, but not bad ;)
* | | | | | | Merge branch 'v6-devel'Rainer Gerhards2012-09-141-1/+1
|\ \ \ \ \ \ \ | |/ / / / / / |/| / / / / / | |/ / / / /
| * | | | | Merge branch 'v6-stable' into v6-develRainer Gerhards2012-09-141-1/+1
| |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: runtime/rule.c
| | * | | | Merge branch 'v5-stable' into v6-stableRainer Gerhards2012-09-141-1/+1
| | |\ \ \ \ | | | | |/ / | | | |/| |
| | | * | | Debug logging slightly improvedRainer Gerhards2012-09-141-1/+1
| | | | | |
* | | | | | Merge branch 'v6-devel'Rainer Gerhards2012-09-131-78/+83
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: ChangeLog
| * | | | | Merge branch 'v6-stable' into v6-develRainer Gerhards2012-09-131-78/+83
| |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: ChangeLog grammar/rainerscript.c grammar/rainerscript.h runtime/rule.c
| | * | | | Merge branch 'v5-stable' into v6-stableRainer Gerhards2012-09-131-78/+83
| | |\| | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: runtime/rule.c
| | | * | | bugfix: invalid property name in property-filter could cause abortRainer Gerhards2012-09-131-56/+63
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ...if action chaining (& operator) was used http://bugzilla.adiscon.com/show_bug.cgi?id=355 Thanks to pilou@gmx.com for the bug report
* | | | | | another small cleanupRainer Gerhards2012-09-121-1/+0
| | | | | |
* | | | | | bugfix: abort when invalid property name was configuredRainer Gerhards2012-09-121-0/+4
| | | | | |
* | | | | | new ruleengine: fixed action handling in regard to filtersRainer Gerhards2012-09-122-4/+5
| | | | | | | | | | | | | | | | | | | | | | | | This was not yet adapted to the new "active" structure.
* | | | | | new ruleengine: bugfix, messages were processed multiple timesRainer Gerhards2012-09-121-10/+2
| | | | | |
* | | | | | new ruleengine: properly remove BSD-style blocksRainer Gerhards2012-09-114-98/+11
| | | | | |
* | | | | | Merge branch 'master-newruleset'Rainer Gerhards2012-09-108-299/+399
|\ \ \ \ \ \
| * | | | | | new ruleengine: cleanupRainer Gerhards2012-09-072-54/+0
| | | | | | |
| * | | | | | new ruleengine: properly freeing stmt treeRainer Gerhards2012-09-061-1/+1
| | | | | | |
| * | | | | | new ruleengine: restore action iterator functionalityRainer Gerhards2012-09-062-47/+38
| | | | | | |
| * | | | | | Merge branch 'master' into master-newrulesetRainer Gerhards2012-09-065-8/+17
| |\ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: runtime/rsconf.c
| * | | | | | | new ruleengine: some cleanupRainer Gerhards2012-09-066-99/+4
| | | | | | | |
| * | | | | | | new ruleengine: implement rainerscript execution engineRainer Gerhards2012-09-062-1/+279
| | | | | | | |
| * | | | | | | switch ruleset.h to ASL 2.0Rainer Gerhards2012-09-041-15/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | There was a single contribution from varmojfekoj, and that has been removed some time ago. So I am the sole copyright holder and can change the license.
| * | | | | | | new ruleengine: PROP and PRI legacy filter structures properly createdRainer Gerhards2012-09-043-77/+43
| | | | | | | |
| * | | | | | | new ruleengine: skeleton for reading conf file in placeRainer Gerhards2012-09-043-2/+32
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | code still does not work, actual functions not implemented
* | | | | | | | bugfix: string-generating templates caused abort if CEE field could not be foundRainer Gerhards2012-09-101-3/+8
| |/ / / / / / |/| | | | | |
* | | | | | | Merge branch 'v6-devel'Rainer Gerhards2012-09-066-10/+33
|\ \ \ \ \ \ \ | |/ / / / / / |/| / / / / / | |/ / / / /
| * | | | | Merge branch 'v6-stable' into v6-develRainer Gerhards2012-09-066-10/+33
| |\| | | |
| | * | | | Fixed TCP CheckConnection handling in omfwd.c.Andre Lorbach2012-08-255-8/+17
| | | | | | | | | | | | | | | | | | | | | | | | Interface needed to be changed in lower stream classes. Syslog TCP Sending is now resumed properly.
| | * | | | bugfix: omusrsmsg incorrect return state & config warning handlingRainer Gerhards2012-08-281-2/+16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | During config file processing, Omusrmsg often incorrectly returned a warning status, even when no warning was present (caused by uninitialized variable). Also, the core handled warning messages incorrectly, and treated them as errors. As a result, omusrmsg (most often) could not properly be loaded. Note that this only occurs with legacy config action syntax. This was a regression caused by an incorrect merge in to the 6.3.x codebase. Thanks to Stefano Mason for alerting us of this bug.
* | | | | | bugfix: specifying json root in a template lead to abortRainer Gerhards2012-09-031-5/+13
| | | | | | | | | | | | | | | | | | | | | | | | Thanks to Miloslav Trmač for alerting us of this problem.
* | | | | | fix memory leakRainer Gerhards2012-08-311-4/+6
| | | | | |
* | | | | | add native json-passing to output modules using JSON APIRainer Gerhards2012-08-312-1/+35
| | | | | |
* | | | | | Merge branch 'master' into v7-develRainer Gerhards2012-08-311-2/+2
|\| | | | |
| * | | | | default outname for $!<property> is now without $! prefixRainer Gerhards2012-08-291-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | also some type cleanup and simplification
* | | | | | Merge branch 'master' into v7-develRainer Gerhards2012-08-293-4/+7
|\| | | | |
| * | | | | adapted Mirek's changes to new JSON passing modeRainer Gerhards2012-08-291-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | now the complete code (JSON passing & ommongodb) could be tested and passed the module tests made during development
| * | | | | add OMSR_TPL_AS_JSON mode for output modules (interface only)Rainer Gerhards2012-08-292-4/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This patch does NOT contain any implementation, this will happen next. Thanks to Miloslav Trmac, who suggested a similar mode, which I based the JSON idea on.
* | | | | | Merge branch 'master' into v7-develRainer Gerhards2012-08-274-7/+85
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: runtime/msg.c