'[Bro] Question : How can I change a particular log file format?'

[prev in list] [next in list] [prev in thread] [next in thread] 

List:       bro
Subject:    [Bro] Question : How can I change a particular log file format?
From:       Aneela Safdar <ansaf_130 () yahoo ! com>
Date:       2016-03-27 8:56:12
Message-ID: 266584401.1260510.1459068973002.JavaMail.yahoo () mail ! yahoo ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]

Hi,
I am a newbie at bro and wanted to change log format of http.log file to js=
on.=C2=A0Currently I have made changes in ascii.bro and now I am getting al=
l logs format in json but what I have to do if I only want http.log to have=
 that format and others keep default?
Also my log files have got still .log extension, how can I change it o .jso=
n?
Thanks,=C2=A0=C2=A0Regards,=C2=A0Aneela Safdar
[Attachment #5 (text/html)]

<html><head></head><body><div style="color:#000; background-color:#fff; \
font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, \
sans-serif;font-size:12px"><div \
id="yui_3_16_0_ym18_1_1459068342139_3988"><span>Hi,</span></div><div \
id="yui_3_16_0_ym18_1_1459068342139_3988"><span><br></span></div><div \
id="yui_3_16_0_ym18_1_1459068342139_3988" dir="ltr"><span \
id="yui_3_16_0_ym18_1_1459068342139_4253">I am a newbie at bro and wanted to change \
log format of http.log file to json.&nbsp;</span></div><div \
id="yui_3_16_0_ym18_1_1459068342139_3988" dir="ltr"><span \
id="yui_3_16_0_ym18_1_1459068342139_4149">Currently I have made changes in ascii.bro \
and now I am getting all logs format in json but what I have to do if I only want \
http.log to have that format and others keep default?</span></div><div \
id="yui_3_16_0_ym18_1_1459068342139_3988" dir="ltr"><span><br></span></div><div \
id="yui_3_16_0_ym18_1_1459068342139_3988" dir="ltr"><span \
id="yui_3_16_0_ym18_1_1459068342139_4210">Also my log files have got still .log \
extension, how can I change it o .json?</span></div><div \
id="yui_3_16_0_ym18_1_1459068342139_3988" dir="ltr"><span><br></span></div><div \
id="yui_3_16_0_ym18_1_1459068342139_3988" \
dir="ltr"><span>Thanks,&nbsp;</span></div><div></div><div \
id="yui_3_16_0_ym18_1_1459068342139_3987">&nbsp;</div><div class="signature" \
id="yui_3_16_0_ym18_1_1459068342139_3986">Regards,</div><div class="signature" \
id="yui_3_16_0_ym18_1_1459068342139_3986">&nbsp;Aneela \
Safdar</div></div></body></html>

_______________________________________________
Bro mailing list
bro@bro-ids.org
http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro

[prev in list] [next in list] [prev in thread] [next in thread] 