[Bro] Suppress log file

[Johanna Amann]

You should be able to just remove the default filter using

Log::remove_filter(Conn::LOG, "default");

which should stop the log file output.

Johanna

On Wed, Jul 29, 2015 at 04:24:14PM -0500, Michael Black wrote:
> Is there a way to suppress the log file without also suppressing a database
> output too?
> 
>  
> 
> For example,  I have conn going to a database
> 
>        local filter_conn: Log::Filter =
> 
>                 [
> 
>                         $name = "sqlite",
> 
>                         $path = "/var/db/conn",
> 
>                         $config = table(["tablename"] = "conn"),
> 
>                         $writer = Log::WRITER_SQLITE
> 
>                 ];
> 
>  
> 
> And I'd like to suppress the log file since it's no longer needed.
> 
> But..doing this:
> 
> Log::disable_stream(Conn::LOG);
> 
> Disables both the file and the database output.
> 
>  
> 
> Solution anybody?
> 
>  
> 
> Mike
> 
>  
> 
>  
> 

> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro