[Bro] Suppress log file

Michael Black mdblack98 at gmail.com
Wed Jul 29 14:24:14 PDT 2015

Is there a way to suppress the log file without also suppressing a database
output too?


For example,  I have conn going to a database

       local filter_conn: Log::Filter =


                        $name = "sqlite",

                        $path = "/var/db/conn",

                        $config = table(["tablename"] = "conn"),

                        $writer = Log::WRITER_SQLITE



And I'd like to suppress the log file since it's no longer needed.

But..doing this:


Disables both the file and the database output.


Solution anybody?





-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20150729/a3d21028/attachment.html 

More information about the Bro mailing list