JSON Namespace

Namespace: JSON.

class zlogging.enum.JSON.TimestampFormat(value)

Bases: IntFlag

Enum: JSON::TimestampFormat.

See also

base/init-bare.zeek

TS_EPOCH = 1

Timestamps will be formatted as UNIX epoch doubles. This is the format that Zeek typically writes out timestamps.

TS_MILLIS = 2

Timestamps will be formatted as unsigned integers that represent the number of milliseconds since the UNIX epoch.

TS_ISO8601 = 4

Timestamps will be formatted in the ISO8601 DateTime format. Subseconds are also included which isn’t actually part of the standard but most consumers that parse ISO8601 seem to be able to cope with that.