[Bro] Changing separator

James Lay jlay at slave-tothe-box.net
Thu Oct 24 08:10:00 PDT 2013

So...I'm almost certain that there was a way to change from the tab 
character, to comma (I thought), but for the life of me I can't seem to 
find it.  Been working with logstash and currently messages come through 


Which is kind of painful for matching.  Any quick pointers on how to do 
this?  Thank you.


More information about the Bro mailing list