Files
falco/test
Mark Stemm f4bb49f1f5 Add test for truncated outputs.
Add a test that specifically tests truncated outputs. A rule contains an
output field %fd.cport which has no value for an open event. Ensure that
the rule's output has <NA> for the cport and the remainder of the rule's
output is filled in.
2017-01-03 12:58:01 -08:00
..
2017-01-03 12:58:01 -08:00
2016-05-25 17:40:01 -07:00
2017-01-03 12:58:01 -08:00