[PROVENANCE INTERNET] login_success event

Zeek
1

If anyone wants the solution : I fix it out using a copy paste of the old login.bro script from 1.5 BRO IDS. Only the part to set : Thanks for the account