Bro Digest, Vol 127, Issue 46

Zeek
1

Where is this line defined? what file would i define this once i create sub folders for file types? I wish to get cron to compress specific folders to save disk space.

Files::add_analyzer(f, Files::ANALYZER_EXTRACT, [$extract_filename=fname]);

Cheers,

John

2

You call add_analyzer in one of your scripts, typically in file_new or in
file_sniff.

https://www.bro.org/sphinx-git/frameworks/file-analysis.html gives a lot
more detail on how and where to use the function.

Johanna