Suppress log file

Zeek
1

Is there a way to suppress the log file without also suppressing a database output too?

For example, I have conn going to a database

local filter_conn: Log::Filter =

[

$name = “sqlite”,

$path = “/var/db/conn”,

$config = table([“tablename”] = “conn”),

$writer = Log::WRITER_SQLITE

];

And I’d like to suppress the log file since it’s no longer needed.

But….doing this:

Log::disable_stream(Conn::LOG);

Disables both the file and the database output.

Solution anybody?

Mike

2

You should be able to just remove the default filter using

Log::remove_filter(Conn::LOG, "default");

which should stop the log file output.

Johanna