[Bro] Question log/spool directory specification in broctl.conf
raj at bivio.net
Wed Feb 25 21:33:21 PST 2015
Thank you, Daniel. I did see the directories for different workers, so my question was more or less a shot in the dark. I will look some more into the worker crashes I have seen, and get back if I need any help.
From: Daniel Thayer [mailto:dnthayer at illinois.edu]
Sent: Wednesday, February 25, 2015 6:20 PM
To: Raj Srinivasan; bro at bro.org
Subject: Re: [Bro] Question log/spool directory specification in broctl.conf
Broctl automatically creates a separate working directory (such as
"spool/worker-1") for each Bro process. All of the logs are automatically sent to the manager.
On 02/25/2015 02:19 PM, Raj Srinivasan wrote:
> I am running multiple bro workers in the same CPU, and would like to
> create different log and spool directories for each worker to avoid
> conflicts. Is there a worker specific meta variable I could use in the
> broctl.cfg file so that when broctl creates log and spool directories,
> it uses different file names for different workers?
> Alternatively, is there a way for all of the workers to use the same
> log and spool directories without conflicts? Currently, if I do that,
> I see workers crashing.
More information about the Bro