logger in a Zeek's cluster
Palumbo Mauro <[email protected]>
| Newsgroups | gmane.comp.security.detection.bro |
|---|---|
| Message-ID | <[email protected]> |
Hi Zeek's devs, I have a beginner's question on the logger process in a Zeek's ckuster. As far as I realized, the manager and the proxy processes get only some events from the worker(s) using the cluster/broker frameworks. In this way, the manager can for example receive events necessary for doing intel/notice or sumstats for example. The necessary info are carried by the events. The logger too does receive only a few events from the other nodes using the cluste/broker frameworks, but not those related to logging. How does it get the logging data from the workers? Could anyone point me where in the code this is done? Thanks, Mauro _______________________________________________ Zeek mailing list [email protected] http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek