# logging in bro

**URL:** https://community.zeek.org/t/logging-in-bro/77
**Category:** Zeek
**Created:** [March 15, 2000, 6:19am UTC](https://community.zeek.org/t/logging-in-bro/77 "2000-03-15T06:19:38Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![Kam\_K\_Yee](https://avatars.discourse-cdn.com/v4/letter/k/bb73d2/32.png) [@Kam\_K\_Yee](https://community.zeek.org/u/Kam_K_Yee)
#### Post date: [March 15, 2000, 6:19am UTC](https://community.zeek.org/t/logging-in-bro/77/1 "2000-03-15T06:19:38Z")

</div>

I have been working with the log files in bro (weird.log, bro.log,  
ftp.log, etc) and have noticed that they are written out in chunks of 4096  
bytes.

I know that this is possibly done for performance reasons, but has anyone  
tried/done writing out to the log files in "real-time" (i.e., as soon  
there is data to be written out (i.e., without buffering))?

I have looked through the code looking for how and where this "buffering"  
is specified and how the "chunk size" is specified to be 4096, but have  
not had much success.

Does anyone know?

Thanks in advance!

---

<div class="post-metadata">

### Author: ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)
#### Post date: [May 6, 2022, 3:36pm UTC](https://community.zeek.org/t/logging-in-bro/77/2 "2022-05-06T15:36:09Z")

</div>