yacin

Okay, that makes sense. I'd throw a +1 for making expressions work. My current use case requires some post-processing where I cannot parse all the data in a `unit` and...

Yeah, I like `Undef` as long as it can be differentiated between "unset" so that's cool. (2) and (3) both seem fine to me and in my very inexperienced opinion,...

Totally agree with you @dwdixon and the minor headaches you mentioned are largely why I haven't changed to fields to more sensible names yet. I'm definitely a bit disappointed in...

Cool stuff, thanks for the PR! Let me know when it's ready, but I'll make some comments on things I'd like to see changed before a merge.

Howdy @initconf I'm back from vacation so I can get back to this. I wanted to add some additional tests first to ensure we don't inadvertently break things. Now that...

So I went ahead and added this to see what it would look like. Notice that the history value at the time the `log4j` log entry is created are different....

Roger that. The ports too I take it? Let's figure out the best way to fix the `target_host` nonsense and take care of both at once? Happy to put this...

Just to add, it appears that [according to the docs](https://docs.zeek.org/en/master/script-reference/attributes.html#attr-&backend) only tables/sets support `&backend`. It would be nice to either (1) include `vector`s in this eventual solution or (2) add...

I like this a lot and would use it when writing unit tests. In fact, I've switched to doing `print function() == F;` or something similar in my btests so...

Oh, I meant the expression prior to evaluation rather than the evaluated result of `` and I kind of assumed that was what (1) referred to. I agree that the...