SeisoLLC / zeek-kafka

A Zeek log writer plugin that publishes to Kafka.
Apache License 2.0
45 stars 15 forks source link

How to stop local Logging and just send to Kafka #41

Closed cybersecurity99 closed 2 years ago

cybersecurity99 commented 2 years ago

Summary of the issue

I want this plugin to send data to kafka only , not write logs in /zeek/logs/current folder on disk. How to do that , I tried one method but it failed.

Expected behavior

Should send logs only to kafka

Steps to reproduce

Installed as mentioned in Read me of this plugin Then I edited local.zeek with

redef Log::enable_local_logging=F

To disable local logging but it also stoppped sending data to kafka

Where applicable, consider providing a patch that uses the end to end testing environment.

Logs, errors, etc.

Not able to stop local logging

Your environment

JonZeolla commented 2 years ago

@cybersecurity99 this is a general question, not specific to the Kafka plugin. I suggest sending it to the Zeek user mailing list or Zeek slack

cybersecurity99 commented 2 years ago

@JonZeolla i asked there didn't get any answer