[Bro] Question log/spool directory specification in broctl.conf

Daniel Thayer dnthayer at illinois.edu
Wed Feb 25 18:19:52 PST 2015

Broctl automatically creates a separate working directory (such as
"spool/worker-1") for each Bro process.  All of the logs are
automatically sent to the manager.

On 02/25/2015 02:19 PM, Raj Srinivasan wrote:
> I am running multiple bro workers in the same CPU, and would like to
> create different log and spool directories for each worker to avoid
> conflicts. Is there a worker specific meta variable I could use in the
> broctl.cfg file so that when broctl creates log and spool directories,
> it uses different file names for different workers?
> Alternatively, is there a way for all of the workers to use the same log
> and spool directories without conflicts? Currently, if I do that, I see
> workers crashing.
> Thanks,
> Raj

More information about the Bro mailing list