From 66ab2a70e5bcc9637dfec89c6134abe10b96dde8 Mon Sep 17 00:00:00 2001 From: Rainer Gerhards Date: Thu, 15 Mar 2012 17:25:26 +0100 Subject: added message property parsesuccess to indicate status of higher level parser run added message property parsesuccess to indicate if the last run higher-level parser could successfully parse the message or not (see property replacer html doc for details) --- plugins/mmaudit/mmaudit.c | 3 +++ 1 file changed, 3 insertions(+) (limited to 'plugins/mmaudit/mmaudit.c') diff --git a/plugins/mmaudit/mmaudit.c b/plugins/mmaudit/mmaudit.c index 8f2a3f71..fcefd013 100644 --- a/plugins/mmaudit/mmaudit.c +++ b/plugins/mmaudit/mmaudit.c @@ -210,6 +210,7 @@ BEGINdoAction int i; es_str_t *estr; char auditID[1024]; + int bSuccess = 0; CODESTARTdoAction pMsg = (msg_t*) ppString[0]; /* note that we can performance-optimize the interface, but this also @@ -278,6 +279,7 @@ dbgprintf("mmaudit: cookie found, type %d, auditID '%s', rest of message: '%s'\n ee_deleteEvent(pMsg->event); } pMsg->event = event; + bSuccess = 1; #if 1 /***DEBUG***/ // TODO: remove after initial testing - 2010-12-01 @@ -293,6 +295,7 @@ dbgprintf("mmaudit: cookie found, type %d, auditID '%s', rest of message: '%s'\n /***END DEBUG***/ #endif finalize_it: + MsgSetParseSuccess(pMsg, bSuccess); ENDdoAction -- cgit