[Bro] redef plugin variables

Johanna Amann johanna at icir.org
Tue Mar 14 11:07:20 PDT 2017


Try redef LogElasticSearch::destination = ...

basically you have to specify the module name explicitly when redef-ing
outside of the module in question.

Johanna

On Wed, Mar 08, 2017 at 02:50:36PM -0500, Munroe Sollog wrote:
> I am using the elasticsearch plugin with NSQ and I am trying to set the following:
> 
> redef destination = "nsq";
> redef server_port = 4151;
> redef nsq_topic = "bro_logs";
> 
> These statements when put in plugins/Bro_Elasticsearch/scripts/init.bro causes everything to work as
> expected.  However that file gets overwritten when the plugin gets rebuilt.  I am trying to figure
> out how to put these statements in my local.bro.  when I include the above in local.bro I get the
> following errors:
> 
> 
> worker-1-1 scripts failed.
> error in /usr/local/bro/share/bro/site/local.bro, line 98: "redef" used but not previously defined
> (destination)
> internal warning in /usr/local/bro/share/bro/site/local.bro, line 98: Can't document redef of
> destination, identifier lookup failed
> 
> I'm assuming I have to prepend these variables with something like "Bro::ElasticSearch" but I can't
> find any docs to clarify.
> -- 
> Munroe Sollog
> LTS - Senior Network Engineer
> x85002
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
> 


More information about the Bro mailing list