Bro log file location

[peterwkc]

Dear forumers,
I had installed and configured bro. It is up and running. May i know where is the log file of bro store and how to view it? Any gui to manage bro?

 

[VladiBG]

depend of your config
grep log /usr/local/share/broctl/scripts/broctl-config.sh
debuglog="/usr/local/spool/debug.log"
logdir="/usr/local/logs"

less /usr/local/etc/broctl.cfg

 

[Lamia]

If only this project - https://github.com/shirkdog/hunter-nsm - could be updated!

JSON logging over the .gz by default BRO installation is the more preferred and useful for further processing.

 

[peterwkc]

Problem solved

 

[VladiBG]

do you use ELK?

 

[peterwkc]

What is ELK?

 

[VladiBG]

ELK Stack - Elasticsearch, Logstash , Kibana