[Bro] Disabling an analyzer in weird

Jan Grashöfer jan.grashoefer at gmail.com
Wed Mar 8 10:17:57 PST 2017

> Topic :)  I'd like to have bro not dump non-rfc compliant syslog 
> messages in the weird file.  How can I go about doing that?  Thank you.

Add a filter for the log might be an option:


More information about the Bro mailing list