Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-16 21:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Change Intel framework to round-robin insertion events across proxies

Browse source
This commit is contained in:
Jon Siwek 2018-05-24 14:35:25 -05:00
parent 45178f3051
commit fe478877c6
6 changed files with 119 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

6
scripts/base/frameworks/intel/cluster.bro
View file

@ -54,7 +54,11 @@ event Cluster::node_up(name: string, id: string)
# has to be distributed.
event Intel::new_item(item: Item) &priority=5
{
Broker::publish(indicator_topic, Intel::insert_indicator, item);
if ( Cluster::proxy_pool$alive_count == 0 )
Broker::publish(indicator_topic, Intel::insert_indicator, item);
else
Cluster::relay_rr(Cluster::proxy_pool, "Intel::new_item_relay_rr",
indicator_topic, Intel::insert_indicator, item);
}
# Handling of item insertion triggered by remote node.