[Bro] ASCII JSON log stream

[Jan Grashofer]

Hi Albert,

I have not tried this yet but regarding the documentation a filter may allow you to set JSON logging for a particular stream (see https://www.bro.org/sphinx-git/scripts/base/frameworks/logging/writers/ascii.bro.html).

Regards,
Jan
________________________________________
From: bro-bounces at bro.org [bro-bounces at bro.org] on behalf of Albert Zaharovits [albert.zaharovits at gmail.com]
Sent: Tuesday, June 30, 2015 09:52
To: bro at bro.org
Subject: [Bro] ASCII JSON log stream

Hello,

I am writing a bro script which creates a ASCII log stream. I would like JSON output only for this stream. I was able to turn on JSON output globally.

Any idea?

Albert
_______________________________________________
Bro mailing list
bro at bro-ids.org
http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro