Hi all,
After some problems to install spicy 1.1.0 in my Zeek cluster under FreeBSD 13-p3, this morning I have tried to install spicy 1.2.0 an all works as expected. Good work!! …
But after installing spicy-plugin and spicy-analysers and executing “zeekctl deploy” (only in manager side) the following error appears in all workers:
root@stirling:/nsm/zeek/spool/idps-prod # more stderr.log
error in /opt/zeek/share/zeek/base/init-bare.zeek, line 1: cannot load plugin library /opt/zeek/lib/zeek/plugins/packages/spicy-plugin//lib/_Zeek-Spicy.freebsd-amd64.so: Shared object “libhilti.so” not found, required by “_Zeek-Spicy.freebsd-amd64.so”
fatal error in /opt/zeek/share/zeek/base/init-bare.zeek, line 1: aborting after plugin errors
Do I need to install spicy in all Zeek cluster components: workers, managers, loggers, etc?
Best regards,
C. L. Martinez