[Bro] Logging in multiple formats

Carl Forsythe finalstatic at gmail.com
Mon Apr 4 18:59:31 PDT 2016


Hi All,
  I've seen examples in how you can log everything in JSON, individual logs
in JSON, or everything in the regular log format. I have a use case in
which I would like to be able to log output in both JSON and the regular
log format as I have a set of consumers that easily ingest JSON and a set
that doesn't enjoy it quite so much.

Is there a way to log in both formats easily similar to how Suricata can
emit both JSON and other log types all at once?

Thanks,
Carl
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20160404/c6981da6/attachment.html 


More information about the Bro mailing list