[Bro] Suppress log file

[Michael Black]

Is there a way to suppress the log file without also suppressing a database
output too?

 

For example,  I have conn going to a database

       local filter_conn: Log::Filter =

                [

                        $name = "sqlite",

                        $path = "/var/db/conn",

                        $config = table(["tablename"] = "conn"),

                        $writer = Log::WRITER_SQLITE

                ];

 

And I'd like to suppress the log file since it's no longer needed.

But..doing this:

Log::disable_stream(Conn::LOG);

Disables both the file and the database output.

 

Solution anybody?

 

Mike

 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20150729/a3d21028/attachment.html