[Bro] logging to multiple locations in a cluster

erik clark philosnef at gmail.com
Fri Oct 14 07:52:02 PDT 2016


Is it possible to log to more than one location? I want my broctl to push a
remote logger, AND log locally, for redundancy in case the remote logger
dies.

So, each capture node in the cluster should be instructed to log to that
capture node, and copy across the wire to the logger node(s). If this is
not possible, is there a way to perhaps sniff the outbound link and log
that?

Erik
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20161014/32deaa11/attachment.html 


More information about the Bro mailing list