uid in files logs

Palumbo Mauro <[email protected]> Wed, 6 Nov 2019 10:08:41 +0000
Newsgroups gmane.comp.security.detection.bro
Message-ID <[email protected]>
Hi everybody,
   it would be useful for us to have the conn uids in the logs from file analyzers (pe.log, x509.log,...). I know this information can be gathered by cross-cehcking different bro logs, but it will save some time to have it already in pe.log, etc. I believe this data is available in the record fa_file.conns, available in events in the file framework, so it seems not difficult to add.
Is there any reason why it is not added by default?

Thanks,
Mauro

_______________________________________________
Zeek mailing list
[email protected]
http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek