Redis Log Writer

Zeek
1

Hello,

I have created a JSON ASCII log stream that is written on a named pipe and from there on a REDIS db.
I would like to remove the pipe logic, and have the log stream written directly to REDIS (using hiredis). I understand I have to code a new Log Writer.

However I don’t know how a client-server logger would fit bro cluster architecture; also I haven’t really considered the performance implications. Would this be something for which you’d accept a pull request?

Best,
Albert

2

However I don’t know how a client-server logger would fit bro cluster
architecture;

On a cluster, only the manager is doing the logging, so in that regard
it doesn't make much of a difference. Generally, a client/server setup
is fine for logging.

Would this be something for which you’d accept a pull request?

I think it would be best to maintain this an external plugin, to avoid
introducing further dependencies into the Bro build. As a plugin, it
should work fine, and if you want, we can include it into our
small-but-growing plugin repository: GitHub - bro/bro-plugins: (OBSOLETE) Plugins for Bro
(which, btw, has a ElasticSearch writer already, which might be
useful as a starting point).

Robin