[Bro-Dev] clusterization issue: logger node vs manager node or both ?

Seth Hall seth at corelight.com
Thu Jun 1 11:10:47 PDT 2017


On Thu, Jun 1, 2017 at 1:12 PM, Aashish Sharma <asharma at lbl.gov> wrote:

> I can surely do "Cluster::local_node_type() == Cluster::LOGGER" and then events logger2manager_events and logger2worker_events etc etc so on so forth.

I *strongly* recommend not running code on the logger.  The whole
point of the logger is that it doesn't have any script execution tasks
to take care of and it's solely dedicated to logging.  What's the
problem you're trying to solve by running code there?

  .Seth

-- 
Seth Hall * Corelight, Inc * seth at corelight.com * www.corelight.com


More information about the bro-dev mailing list