zeek / zeek

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.
https://www.zeek.org
Other
6.31k stars 1.2k forks source link

Add prof.log metrics to telemetry #3081

Closed awelzel closed 3 weeks ago

awelzel commented 1 year ago

Some of the prof.log data produced would be useful to be exposed via the telemetry framework and Prometheus directly. Either by leveraging the C++ API or scripting.

Reference to method writing out this data: https://github.com/zeek/zeek/blob/master/src/Stats.cc#L72

The implementation might be in the subsystems directly: E.g. updating counters when producing or consuming messages for threads, rather than hooking into the existing ProfileLogger::Log() method.

          This sounds like something that a ticket could be opened for as a future enhancement.

_Originally posted by @timwoj in https://github.com/zeek/zeek-docs/pull/186#discussion_r1204509867_

timwoj commented 1 year ago

Here's some information the logs that are generated in prof.log:

At first call:

Logs:

“Expensive” Logs: