zeek/scripts/base/frameworks
Christian Kreibich ead6134501 Add backpressure disconnect notification to cluster.log and via telemetry
This adds a Broker-specific script to the cluster framework, loaded only when
Zeek is running in cluster mode. It adds logging in cluster.log as well as
telemetry via a metrics counter for Broker-observed backpressure disconnects.

The new zeek_broker_backpressure_disconnects counter, labeled by the neighboring
peer that the reporting node has determined to be unresponsive, counts the
number of unpeerings for this reason.

Here the node "worker" has observed node "proxy" falling behind once:

# HELP zeek_broker_backpressure_disconnects_total Number of Broker peering drops due to a neighbor falling too far behind in message I/O
# TYPE zeek_broker_backpressure_disconnects_total counter
zeek_broker_backpressure_disconnects_total{endpoint="worker",peer="proxy"} 1

Includes small btest baseline update to reflect @load of a new script.
2024-12-06 15:18:05 -08:00
..
analyzer Add logging of disabled analyzers to analyzer.log 2024-07-09 18:22:43 +02:00
broker Support re-peering with Broker peers that fall behind 2024-12-06 15:18:05 -08:00
cluster Add backpressure disconnect notification to cluster.log and via telemetry 2024-12-06 15:18:05 -08:00
config Revert "Merge remote-tracking branch 'origin/topic/vern/at-if-analyze'" 2023-05-31 09:20:33 +02:00
control annotate base scripts with &is_used as needed 2022-05-26 17:39:17 -07:00
files Fix cid propagation into files.log 2024-04-29 14:13:19 +01:00
input More bro-to-zeek renaming in scripts and other files 2019-05-16 02:36:41 -05:00
intel intel: Switch to Cluster::publish() 2024-11-06 15:27:48 +01:00
logging Test synchronous/journal mode options for SQLite log writer 2024-11-26 12:26:38 +00:00
netcontrol netcontrol: Replace Broker::auto_publish() 2024-11-06 15:27:48 +01:00
notice frameworks/notice: Remove Broker::auto_publish() 2024-11-14 12:59:22 +01:00
openflow openflow: Remove Broker::auto_publish() 2024-11-14 12:59:22 +01:00
packet-filter Add PacketFilter::remove_exclude function 2024-04-17 21:25:35 +00:00
reporter Support for log filter policy hooks 2020-09-30 12:32:45 -07:00
signatures allow signature actions to be dynamically updated 2023-07-13 17:25:32 -07:00
software frameworks/software: Fix stale value used for stripping 2023-11-17 14:37:28 +01:00
spicy Spicy: Register well-known ports through an event handler. 2024-08-22 10:24:55 +02:00
sumstats sumstat/non-cluster: Move last epoch processing to zeek_done() 2024-11-18 15:58:01 +01:00
supervisor Management framework: add metrics port in management & Supervisor node records 2024-07-08 23:05:24 -07:00
telemetry Merge branch 'topic/christian/telemetry-make-bifs-primary' 2024-10-24 07:09:16 -07:00
tunnels Add GTPv1 packet analyzer, disable old analyzer 2021-11-23 19:36:50 -07:00