pgaulon / zeek-notice-slack Goto Github PK

Hi,

json.seek is not longer available in base/utils

to_json is now a bif, no longer a script. Loading base/utils/json.zeek is no
longer necessary and has been deprecated. to_json should yield much better, always
valid json. There are some small differences in output; unnecessary spaces are removed
and port values are rendered differently, now including the port and the protocol.

The installation via zkg seems to work but nothing is copied into the plugin/script folder. I guess because of the missing load instructions in v1.0.0:

Failed to load "zeek/pgaulon/zeek-notice-slack": no __load__.zeek within package script_dir and no plugin included

Could you please release a new version. :-)

Hello,
Thank you for developing this Zeek-Slack integration plugin. We have been using this in our environment for some time now and have enjoyed its notification enhancements.

However, after upgrading a test machine to Zeek Version 6.0.0 , we now receive the following error regarding this Slack plugin:

"
error in /opt/zeek/share/zeek/site/zeek-notice-slack/./notice_slack.zeek, lines 45-49: Notice::request is used inside "when" statement but not captured (when (Notice::result = ActiveHTTP::request(Notice::request)) { if (Notice::result$code != 200) Reporter::warning(fmt(Slack notice received an error status code: %d, Notice::result$code))})
"

Would you have any recommendations on how we can rectify this issue?