Multiple log streams

I originally sent this to the wrong email address – sorry Bro team. :slight_smile:

I used this script:

to log simultaneously as JSON and normal Bro TSV.

I’m seeing only a fraction of the total logs being written as JSON – it varies between about 25-40%.

The script looks OK to me. Any ideas what’s wrong? Is there a better way to do dual log streams?