zeek/scripts
Dominik Charousset 30615f425e Hook into Broker logs via its new API
The new Broker API allows us to provide a custom logger to Broker that
pulls previously unattainable context information out of Broker to put
them into broker.log for users of Zeek.

Since Broker log events happen asynchronously, we cache them in a queue
and use a flare to notify Zeek of activity. Furthermore, the Broker
manager now implements the `ProcessFd` function to avoid unnecessary
polling of the new log queue. As a side effect, data stores are polled
less as well.
2025-02-08 16:28:02 +01:00
..
base Hook into Broker logs via its new API 2025-02-08 16:28:02 +01:00
policy Merge remote-tracking branch 'origin/topic/johanna/dpd-changes' 2025-02-07 07:35:30 +00:00
site telemetry: Deprecate prometheus.zeek policy script 2024-07-21 17:49:21 +02:00
spicy Update COPYING date to now and fix some [skip CI] 2025-01-09 08:38:45 -05:00
zeekygen zeekygen: Disable Cluster::Experimental module 2024-12-13 10:03:44 +01:00
CMakeLists.txt Use the same rules as cmake submodule to reformat Zeek 2023-05-09 08:31:43 -07:00
test-all-policy.zeek DPD: change policy script for service violation logging; add NEWS 2025-02-06 18:56:30 +00:00