[Zeek] Investigating logger crash/restart events

Mustafa Qasim alajal at gmail.com
Wed Oct 2 02:04:43 PDT 2019


I have an instance where log files were terminated during the day and
started the next day around the same time. broctl status shows that logger
started exactly a few seconds before the time logging was resumed.

What procedures one can follow to investigate such disruption?

*Mustafa Qasim*
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/zeek/attachments/20191002/09f1bffc/attachment.html 

More information about the Zeek mailing list