[Bro] Bro clustered limit load

David elhijo at 0lim.net
Mon Jun 13 07:57:13 PDT 2016


Thanks Justin, looks like exactly what I want.

David

On 06/13/2016 04:24 PM, Azoff, Justin S wrote:
>> On Jun 13, 2016, at 7:48 AM, David <elhijo at 0lim.net> wrote:
>>
>> Hi,
>>
>> I'd like to know if there is a way to select which script a worker is
>> loading.
> broctl starts each worker with an option that tells each worker to use its own name as a script prefix.  If you look at the running bro command you should see something like
>
> /usr/local/bro/bin/bro -i p1p1 -U .status -p broctl -p broctl-live -p local -p worker-1 local.bro broctl base/frameworks/cluster local-worker.bro broctl/auto
>
> where 'worker-1' is the name of the worker.
>
> This means that if you create a script called worker-1.local.bro, it will be loaded for that worker only
>



More information about the Bro mailing list