[Bro] Bro eliminating banner in log files .
seth at icir.org
Mon Dec 15 06:59:36 PST 2014
> On Dec 14, 2014, at 4:44 PM, John Donnelly <jdonnelly at dyn.com> wrote:
> Hi. Is there a way to eliminate the descriptive record banner that is the first line of the log file?
You can do this per-log or globally.
Depending on what this is for, it may be beneficial to just output your log as JSON:
If you want to do either of these settings only in a single log, you can do this…
local filt = Log::Filter($name="default",
$config=table(["include_meta"] = "F"));
You should be able to configure any of the other global ascii log settings the same as I did in that example.
International Computer Science Institute
(Bro) because everyone has a network
More information about the Bro