zeek/scripts/base/frameworks/cluster
Arne Welzel c813872915 cluster/supervisor: Multi-logger awareness
When multiple loggers are configured in a Supervisor controlled cluster
configuration, encode extra information into the rotated filename to
identify which logger produced the log.

This is similar to the approach taken for ZeekControl, re-using the
log_suffix terminology, but as there's only a single zeek-archiver
process and no postprocessors and no other side-channel for additional
information, we encode extra metadata into the filename. zeek-archiver
is extended to recognize the special metadata part of the filename.

This also solves the issue that multiple loggers in a supervisor setup
overwrite each others log files within a single log-queue directory.
2023-05-05 12:27:25 +02:00
..
nodes cluster/supervisor: Multi-logger awareness 2023-05-05 12:27:25 +02:00
__load__.zeek BrokerStore<->Zeek tables: &backend works for in-memory stores. 2020-07-01 16:38:10 -07:00
broker-stores.zeek Merge remote-tracking branch 'origin/topic/neverlord/1336' 2020-12-23 10:36:09 -08:00
main.zeek Add hook into cluster connection setup. 2023-04-21 19:04:52 +02:00
pools.zeek Spelling fixes: scripts 2022-11-02 17:36:39 -04:00
README More bro-to-zeek renaming in scripts and other files 2019-05-16 02:36:41 -05:00
setup-connections.zeek Add hook into cluster connection setup. 2023-04-21 19:04:52 +02:00

The cluster framework provides for establishing and controlling a cluster
of Zeek instances.