How to update table automaticlly when reading from SQLite Databases?

I see the error of “error: /root/bro-suricata/bro/intels/abnormal/Input::READER_SQLITE: SQLite only supports manual reading mode.”

Here is my bro script

export {

type Idx_HOST: record {
host: string;
};

type Val: record {
target: string &optional;
start_times: vector of string &optional;
end_times: vector of string &optional;
nsrc_ips: vector of string &optional;

reason: string &optional;

};

global abnormal_host: table[string] of Val = table();

}

event bro_init()
{
Input::add_table([
$source=abnormal_db,
$name=“abnormal_host”,
$idx=Idx_HOST,
$val=Val,
$destination=abnormal_host,
$reader=Input::READER_SQLITE,
$config=table([“query”] = “select * from abnormal_host;”)
$mode=Input::REREAD
]);

}

How can i reread the data from sqlite automaticlly.?
Or how can i use the command of Input::force_update("") in python?
Thanks you very much

Hello,

I see the error of "error:
/root/bro-suricata/bro/intels/abnormal/Input::READER_SQLITE: SQLite only
supports manual reading mode."

[...]

How can i reread the data from sqlite automaticlly.?

That is not supported at the moment, sorry. The current implementation
does not support any kind of automatic notification upon changes.

Or how can i use the command of `Input::force_update("")` in python?

There also is no direct way to do this - you have to trigger the command
within Bro. If you want to trigger it in a python script, you have to send
a notification to Bro that it should execute Input::force_update. The
easiest way to do that probably is to use Broker (the new bro
communication library) in python, send an event to Bro, catch that event
in the master, and let that event call force_update.

I hope this helps,
Johanna