I’ve been trying to use split_string_all in an event handler, but it’s throwing the error “unknown identifier split_string_all, at or near “split_string_all””. In my debugging, I’ve ended up trying the example directly from the documentation (https://www.bro.org/sphinx/scripts/base/bif/strings.bif.bro.html#id-split_string):
local service_id = split_string_all(“a-b–cd”, /(-)+/);
Even this is throwing the error! I’m a bro programming newbie, so my code may be broken. If not, then is this a bug?
Sr. Cyber Security Engineer,
Emerging Technologies, root9B,
San Antonio, Texas
This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity named. If you are not the named addressee you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited. Please notify the sender immediately by email if you received this email in error and delete this email from your system. Any views or opinions presented in this e-mail are solely those of the author and do not necessarily represent those of root9B LLC.