[Bro] Changing separator
jlay at slave-tothe-box.net
Thu Oct 24 08:41:49 PDT 2013
On 2013-10-24 09:10, James Lay wrote:
> So...I'm almost certain that there was a way to change from the tab
> character, to comma (I thought), but for the life of me I can't seem
> find it. Been working with logstash and currently messages come
> Which is kind of painful for matching. Any quick pointers on how to
> this? Thank you.
Thanks for the responses gents...every little bit helps.
More information about the Bro