mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 06:38:20 +00:00
![]() When multiple loggers are configured in a Supervisor controlled cluster configuration, encode extra information into the rotated filename to identify which logger produced the log. This is similar to the approach taken for ZeekControl, re-using the log_suffix terminology, but as there's only a single zeek-archiver process and no postprocessors and no other side-channel for additional information, we encode extra metadata into the filename. zeek-archiver is extended to recognize the special metadata part of the filename. This also solves the issue that multiple loggers in a supervisor setup overwrite each others log files within a single log-queue directory. |
||
---|---|---|
.. | ||
config-bare-mode.zeek | ||
config-cluster-leftover-log-archival.zeek | ||
config-cluster-log-archival.zeek | ||
config-cluster-multi-logger.zeek | ||
config-cluster-pcap.zeek | ||
config-cluster.zeek | ||
config-directory.zeek | ||
config-env.zeek | ||
config-output-redirect.zeek | ||
config-scripts.zeek | ||
create-interface-pcap-file-error.zeek | ||
create.zeek | ||
destroy.zeek | ||
node_status.zeek | ||
output-redirect-hook.zeek | ||
output-redirect.zeek | ||
restart.zeek | ||
revive-leaf.zeek | ||
revive-stem.zeek | ||
status.zeek |