Individual set_seperator for different feeds

Description

Can we assign an individual set_separator per feed ?

Why ?:

Various data feeds from different sources have their own fields separators.

We need to post process these feeds in order to digest the data into bro using input-framework, this creates a need to have two tiered storage for each of the data feeds (original data + re-formatted data for input framework).

At present the workaround is to basically format all data feeds to use intel-framework and this works very well. There is still useful needs to have data feeds outside intel-framework for example - digesting list of subnets+building allocations in the network or digesting auth data... and so on.

Environment

None

Assignee

Unassigned

Reporter

Aashish Sharma

External issue ID

None

Components

Fix versions

Affects versions

Priority

Normal
Configure