[Bro] Log Stream Types

anthony kasza anthony.kasza at gmail.com
Wed Apr 2 19:00:05 PDT 2014

Hey Bro List,

I'm hoping someone could explain why
%prefix%bro/share/bro/base/frameworks/logging/main.bro (from an
installation) defines a Log::Stream type as a record of two any types
but bro/src/logging/Manager.cc (line 335 from Github) seems to enforce
Log::Stream types to consist of an event type. I'm curious to see if
it is possible to take immediate action upon a log line being ready
with a function or hook instead of having to wait for an event to be


More information about the Bro mailing list