[Bro] How to turn off logging Bro alerts via syslog
jyjung at csail.mit.edu
Mon Dec 27 23:11:16 PST 2004
We are running Bro 0.9a8.14 on our Linux system. We notice that
/ is often 100% full because of huge /var/log/messages, which
seems filled with the Bro alerts that are also recorded in its
own alarm log file.
Is there any way to turn off logging those Bro alerts via syslog? If
not, would we be missing any Bro alerts if we delete /var/log/messages?
More information about the Bro