Event UUID and timestamp in alert.json

[buzztroll]

Would it be possible to get UUID associated with ever event and have this ID written to alert.json along with the other information in it? This would allow applications consuming that information to know in an idempotent way if they had consumed that particular event or not.

If this is not possible or difficult could a timestamp be included in the JSON output? Perhaps the format of the JSON documents could be controlled in configuration?

[jrossi]

ossec-hids/src/analysisd/format/to_json.c

Line 18 in eb69de7

char *Eventinfo_to_jsonstr(const Eventinfo *lf)

Is a great location to start. We would be happen to accept a pull request for this feature.

[dvas0004]

This is now fixed... current latest version outputs it in string format, proposed alternative method to output timestamp in UNIX time here:

#1102