Allowing only certain log types

Hi
you could disable log by using Log::disable_stream

to my knowledge it only stop writing to log. It does not going to save process

reference

–sample –
add this to local.bro or separate bro file

event bro_init()

{

Log::disable_stream(Syslog::LOG);

Log::disable_stream(PE::LOG);

Log::disable_stream(X509::LOG);

Log::disable_stream(SIP::LOG);

Log::disable_stream(SNMP::LOG);

Log::disable_stream(mysql::LOG);

Log::disable_stream(Syslog::LOG);

}