[Bro] HTTP Log filter

Seth Hall seth at corelight.com
Fri Sep 28 05:05:10 PDT 2018



On 28 Sep 2018, at 8:03, Seth Hall wrote:

> In addition to Brandon's suggestion and code snippet (which is totally 
> the right way to do it!), I'll point you to a blog post I wrote years 
> ago about log filtering that might help you get a broader perspective 
> on how Bro does log filtering.

I should actually include the link... :)
	http://blog.bro.org/2012/02/filtering-logs-with-bro.html

   .Seth

--
Seth Hall * Corelight, Inc * www.corelight.com


More information about the Bro mailing list