[Bro] Missing notice.log, have weird.log

Seth Hall seth at corelight.com
Wed May 31 12:20:51 PDT 2017


On Wed, May 31, 2017 at 2:31 PM, Kenneth Goldman <kgoldman at us.ibm.com> wrote:
> The quick starter refers to a notice.log file.  It's not being created.

Logs in Bro are created when they are written to.  It's like that none
of the scripts you have loaded are generating notices.

> I do have "weird.log", that seems undocumented.  Could the name perhaps have
> changed?

The weird log's documentation can be found here:
      https://www.bro.org/sphinx/scripts/base/frameworks/notice/weird.bro.html#type-Weird::Info

  .Seth

-- 
Seth Hall * Corelight, Inc * seth at corelight.com * www.corelight.com


More information about the Bro mailing list