Hi
you could disable log by using Log::disable_stream
to my knowledge it only stop writing to log. It does not going to save process
–sample –
add this to local.bro or separate bro file
event bro_init()
{
Log::disable_stream(Syslog::LOG);
Log::disable_stream(PE::LOG);
Log::disable_stream(X509::LOG);
Log::disable_stream(SIP::LOG);
Log::disable_stream(SNMP::LOG);
Log::disable_stream(mysql::LOG);
Log::disable_stream(Syslog::LOG);
}