Thank you! This worked for me: event bro_init() { local f = Log::get_filter(MyLog::LOG, "default”); f$config = table(["use_json"] = "T”); Log::add_filter(MyLog::LOG, f); } Albert