# Store ASCII and JSON output format at the same time

**URL:** <https://community.zeek.org/t/store-ascii-and-json-output-format-at-the-same-time/5296>\
**Category:** Zeek\
**Created:** [May 9, 2018, 10:03am UTC](https://community.zeek.org/t/store-ascii-and-json-output-format-at-the-same-time/5296 "2018-05-09T10:03:48Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![jose\_antonio\_izquier](https://avatars.discourse-cdn.com/v4/letter/j/e47c2d/32.png) [@jose\_antonio\_izquier](https://community.zeek.org/u/jose_antonio_izquier)\
**Post date:** [May 9, 2018, 10:03am UTC](https://community.zeek.org/t/store-ascii-and-json-output-format-at-the-same-time/5296/1 "2018-05-09T10:03:48Z")

</div>

Hi Bro Family,

We want to implement a logging configuration with Bro that will allow us to store the output in both formats at the same time: JSON and ASCII.

The main idea is to have something like:  
.- weird.log  
.- weird.json

As each filter seems to be able to use one writer, I can’t see the way to accomplish this configuration with current plugins, configs, packets. Hopefully, I’m wrong.

Does someone know if there is a configuration or packet that can help to achieve this config?

---

<div class="post-metadata">

**Author:** ![Jan](https://avatars.discourse-cdn.com/v4/letter/j/ce7236/32.png) [@Jan](https://community.zeek.org/u/Jan)\
**Post date:** [May 9, 2018, 11:38am UTC](https://community.zeek.org/t/store-ascii-and-json-output-format-at-the-same-time/5296/2 "2018-05-09T11:38:01Z")

</div>

There is a package that provides more or less exactly this  
functionality: [https://github.com/J-Gras/add-json](https://github.com/J-Gras/add-json)

If you have installed the Bro Package Manager:  
bro-pkg install add-json

Jan

---

<div class="post-metadata">

**Author:** ![jose\_antonio\_izquier](https://avatars.discourse-cdn.com/v4/letter/j/e47c2d/32.png) [@jose\_antonio\_izquier](https://community.zeek.org/u/jose_antonio_izquier)\
**Post date:** [May 9, 2018, 11:51am UTC](https://community.zeek.org/t/store-ascii-and-json-output-format-at-the-same-time/5296/3 "2018-05-09T11:51:08Z")

</div>

Thanks Jan,

Will check it right now.

---

<div class="post-metadata">

**Author:** ![jose\_antonio\_izquier](https://avatars.discourse-cdn.com/v4/letter/j/e47c2d/32.png) [@jose\_antonio\_izquier](https://community.zeek.org/u/jose_antonio_izquier)\
**Post date:** [May 9, 2018, 12:17pm UTC](https://community.zeek.org/t/store-ascii-and-json-output-format-at-the-same-time/5296/4 "2018-05-09T12:17:19Z")

</div>

Tested… it works. Thanks

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:45pm UTC](https://community.zeek.org/t/store-ascii-and-json-output-format-at-the-same-time/5296/5 "2022-05-06T15:45:46Z")

</div>