<div dir="auto">Awesome, thanks! </div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">Il Mer 10 Giu 2020, 18:28 Jon Siwek <<a href="mailto:jsiwek@corelight.com">jsiwek@corelight.com</a>> ha scritto:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On Wed, Jun 10, 2020 at 8:14 AM Davide Robusto <<a href="mailto:daviderobusto@gmail.com" target="_blank" rel="noreferrer">daviderobusto@gmail.com</a>> wrote:<br>
<br>
> Is it possible to inhibit the use of code fragments for workers?<br>
> Zeek scripts can only be used by Zeek's "manager" or "logger",<br>
> so as to prevent "workers" from doing unwanted actions? If yes, is also possible to make "worker"<br>
> able to use some code fragments instead of others ?<br>
<br>
See if these examples help:<br>
<a href="https://docs.zeek.org/en/current/frameworks/broker.html#cluster-framework-examples" rel="noreferrer noreferrer" target="_blank">https://docs.zeek.org/en/current/frameworks/broker.html#cluster-framework-examples</a><br>
<br>
This particular one shows 3 different way to conditionalize the<br>
execution of code based on either the node type or a specific node's<br>
name: <a href="https://docs.zeek.org/en/current/frameworks/broker.html#manager-sending-events-to-workers" rel="noreferrer noreferrer" target="_blank">https://docs.zeek.org/en/current/frameworks/broker.html#manager-sending-events-to-workers</a><br>
<br>
- Jon<br>
</blockquote></div>