From 594d3d66d5d15e9dfc9286e8f61aa85eebfd524f Mon Sep 17 00:00:00 2001
From: Mark Stemm <mark.stemm@gmail.com>
Date: Sun, 8 May 2016 14:27:08 -0700
Subject: [PATCH] Allow missing output fields.

Add a leading * to the format string so output with missing fields is
just displayed with '<NA>' values instead of being aborted.

This fixes #42.
---
 userspace/falco/lua/output.lua | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/userspace/falco/lua/output.lua b/userspace/falco/lua/output.lua
index d4098d99..78573b94 100644
--- a/userspace/falco/lua/output.lua
+++ b/userspace/falco/lua/output.lua
@@ -5,7 +5,7 @@ levels = {"Emergency", "Alert", "Critical", "Error", "Warning", "Notice", "Infor
 local outputs = {}
 
 function mod.stdout(evt, level, format)
-   format = "%evt.time: "..levels[level+1].." "..format
+   format = "*%evt.time: "..levels[level+1].." "..format
    formatter = falco.formatter(format)
    msg = falco.format_event(evt, formatter)
    print (msg)