[Bro] redef plugin variables
Johanna Amann
johanna at icir.org
Tue Mar 14 11:07:20 PDT 2017
Try redef LogElasticSearch::destination = ...
basically you have to specify the module name explicitly when redef-ing
outside of the module in question.
Johanna
On Wed, Mar 08, 2017 at 02:50:36PM -0500, Munroe Sollog wrote:
> I am using the elasticsearch plugin with NSQ and I am trying to set the following:
>
> redef destination = "nsq";
> redef server_port = 4151;
> redef nsq_topic = "bro_logs";
>
> These statements when put in plugins/Bro_Elasticsearch/scripts/init.bro causes everything to work as
> expected. However that file gets overwritten when the plugin gets rebuilt. I am trying to figure
> out how to put these statements in my local.bro. when I include the above in local.bro I get the
> following errors:
>
>
> worker-1-1 scripts failed.
> error in /usr/local/bro/share/bro/site/local.bro, line 98: "redef" used but not previously defined
> (destination)
> internal warning in /usr/local/bro/share/bro/site/local.bro, line 98: Can't document redef of
> destination, identifier lookup failed
>
> I'm assuming I have to prepend these variables with something like "Bro::ElasticSearch" but I can't
> find any docs to clarify.
> --
> Munroe Sollog
> LTS - Senior Network Engineer
> x85002
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>
More information about the Bro
mailing list