cleanup

Author: GitMirar

README.md

@@ -122,6 +122,7 @@ The selector engine is configured in a YAML file which is provided via the `-s`
 Available selector implementations:
 
 * regex: match the `RRNAME` field of the observation with one or multiple selectors
+* lua: process observations with lua scripts, see *selector.lua* for an example
 
 Example:
 

selector.lua

@@ -1,3 +1,4 @@
+-- implement the process function for custom lua selectors
 function process(o)
     print("observation fields:")
     print(o:rcode())

selector/selector_lua.go

@@ -2,9 +2,10 @@ package selector
 
 import (
 	"errors"
+	"io/ioutil"
+
 	"github.com/DCSO/balboa/observation"
 	lua "github.com/yuin/gopher-lua"
-	"io/ioutil"
 )
 
 const (
@@ -142,7 +143,6 @@ func (l *LuaSelector) Reinitialize() (err error) {
 }
 
 func (l *LuaSelector) ProcessObservation(observation *observation.InputObservation) (err error) {
-
 	fn := l.L.GetGlobal(luaProcessObservationFunc)
 	if err := l.L.CallByParam(lua.P{
 		Fn:      fn,

selectors.yaml

@@ -15,8 +15,9 @@ selectors:
       - filtered_tlds
     tags:
       - possible_cobaltstrike
-  - name: Lua Selector
-    type: lua
-    script: selector.lua
-    ingest:
-      - filtered_tlds
+# Example for a lua selector configuration
+#  - name: Lua Selector
+#    type: lua
+#    script: selector.lua
+#    ingest:
+#      - filtered_tlds