[Zeek] Decreasing Log Cycle Time
Aashish Sharma
asharma at lbl.gov
Wed Sep 4 09:11:39 PDT 2019
In broctl.cfg, you can set
LogRotationInterval = 300
On Wed, Sep 04, 2019 at 11:03:20AM -0400, Michael Gez wrote:
> Hi all,
>
> If I am not mistaken, Bro/Zeek cycles logs hourly.
> This cycle is causing some unpredictable behavior in my tailing algorithm.
>
> If i could set it to cycle every 5 minutes rather than on the hour, it
> would be very beneficial to testing and resolving issues.
> Is there a way I can reduce the amount of time Bro takes in between log
> cycles?
>
> Thanks!
> _______________________________________________
> Zeek mailing list
> zeek at zeek.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek
More information about the Zeek
mailing list