Merge pull request elastic#188 from Robert-Weber/jsonLogBuilder2

Json log builder2
harper-carroll · Jun 13, 2014 · c13c972 · c13c972
2 parents ae01640 + 79e3f33
commit c13c972
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 1 deletion.
diff --git a/protofiles/DpiMsgLRproto.proto b/protofiles/DpiMsgLRproto.proto
@@ -63,6 +63,7 @@ message DpiMsgLRproto
    repeated uint32 SrcIP6 = 42;
    repeated uint32 DestIP6 = 43;
    optional string RawData = 44;
+   optional uint64 TimeEnd = 45;
    // REMEMBER TO UPDATE resources/DpiMsgLRproto.protoheader as well
 
 repeated bytes framed_ipQ_PROTO_DIAMETER = 343; // QOSMOS:Q_PROTO_DIAMETER,Q_DIAMETER_FRAMED_IP

diff --git a/resources/DpiMsgLRproto.protoheader b/resources/DpiMsgLRproto.protoheader
@@ -63,5 +63,6 @@ message DpiMsgLRproto
    repeated uint32 SrcIP6 = 42;
    repeated uint32 DestIP6 = 43;
    optional string RawData = 44;
+   optional uint64 TimeEnd = 45;
    // REMEMBER TO UPDATE resources/DpiMsgLRproto.protoheader as well
 
diff --git a/scripts/buildESTemplate.pl b/scripts/buildESTemplate.pl
@@ -49,7 +49,10 @@ sub ReadProtoFile {
 print "\"DestIP6\"  : { \"type\": \"string\", \"index\" : \"not_analyzed\", \"ignore_malformed\" : true },\n";
 print "\"TimeStart\" : { \"format\": \"yyyy/MM/dd HH:mm:ss||yyyy/MM/dd||yyyy-MM-dd'T'HH:mm:ss.SSSZZ\", \"type\": \"date\"},\n";
 print "\"TimeUpdated\" : { \"format\": \"yyyy/MM/dd HH:mm:ss||yyyy/MM/dd||yyyy-MM-dd'T'HH:mm:ss.SSSZZ\", \"type\": \"date\"},\n";
-print "\"TimeTotal\" : { \"type\": \"long\", \"ignore_malformed\" : true },\n";
+print "\"TimeTotal\" : { \"type\": \"long\", \"ignore_malformed\" : true},\n";
+print "\"TimeEnd\" : { \"type\": \"long\", \"ignore_malformed\" : true},\n";
+print "\"TimeStartRaw\" : { \"type\": \"long\", \"ignore_malformed\" : true, \"index\" : \"no\", \"store\" : \"no\" },\n";
+print "\"TimeUpdatedRaw\" : { \"type\": \"long\", \"ignore_malformed\" : true, \"index\" : \"no\", \"store\" : \"no\" },\n";
 print "\"TimeDelta\" : { \"type\": \"long\", \"ignore_malformed\" : true },\n";
 print "\"Captured\" : { \"type\": \"string\", \"null_value\": \"false\"},\n";
 print "\"Session\" : {\"type\": \"string\", \"index\" : \"not_analyzed\"},\n";