Add new Zeek datasets
Open
needs_team
Stalled
- Dominant language
- Go
- Stars
- 12.7k
- Forks
- 5k
- Avg merge
- 2d 15m
- Merged PRs (30d)
- 385
Description
Zeek version 6.1 added new datasets:
- quic
- ldap
- ldap_search
More info here:
https://github.com/zeek/zeek/releases/tag/v6.1.0
It would be useful to ingest this data in Elasticsearch.
Contributor guide
Research direction
Start with the Zeek 6.1.0 release notes linked in the issue, then inspect the repository's existing Zeek dataset ingestion. The work is done when the quic, ldap, and ldap_search datasets are ingested into Elasticsearch with the established Zeek integration behavior.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- elasticsearch, go
- Domain
- data
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 55/100