# syslog events

**URL:** <https://community.zeek.org/t/syslog-events/461>\
**Category:** Zeek\
**Created:** [February 15, 2004, 9:38pm UTC](https://community.zeek.org/t/syslog-events/461 "2004-02-15T21:38:51Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![\_rmkml](https://avatars.discourse-cdn.com/v4/letter/_/87869e/32.png) [@\_rmkml](https://community.zeek.org/u/_rmkml)\
**Post date:** [February 15, 2004, 9:38pm UTC](https://community.zeek.org/t/syslog-events/461/1 "2004-02-15T21:38:51Z")

</div>

Hi,

Possible receive bro events with syslog daemon ?

possible coding function to convert all events in same function ?  
(and on this new function, choice syslog / stdout / stderr ...)

Regards

[Rmkml@Wanadoo.fr](mailto:Rmkml@Wanadoo.fr)

---

<div class="post-metadata">

**Author:** ![Ruoming\_Pang](https://avatars.discourse-cdn.com/v4/letter/r/df788c/32.png) [@Ruoming\_Pang](https://community.zeek.org/u/Ruoming_Pang)\
**Post date:** [February 15, 2004, 10:03pm UTC](https://community.zeek.org/t/syslog-events/461/2 "2004-02-15T22:03:52Z")

</div>

> Possible receive bro events with syslog daemon ?

Sorry, I don't fully get it -- do you mean generating events from syslog  
or dumping events to syslog?

If it's the latter, a little hack can make it possible -- all events go  
though EventMgr (see Event.cc). However, you may want to be careful in  
printing the event parameters, some are large chunks of data, e.g. in  
event http\_entity\_data.

Ruoming

---

<div class="post-metadata">

**Author:** ![\_rmkml](https://avatars.discourse-cdn.com/v4/letter/_/87869e/32.png) [@\_rmkml](https://community.zeek.org/u/_rmkml)\
**Post date:** [February 15, 2004, 10:16pm UTC](https://community.zeek.org/t/syslog-events/461/3 "2004-02-15T22:16:15Z")

</div>

Thanks Ruoming for quick answers  
yes my question is how dumping bro events to syslog.

I have another question,  
How receive bro events in centralized console mgmt ?  
( syslog / redir stdout / \*sql\* / bro\_tunnel / ... ?)  
like snort/acid ?

Thanks again

Regards

[Rmkml@Wanadoo.fr](mailto:Rmkml@Wanadoo.fr)

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:36pm UTC](https://community.zeek.org/t/syslog-events/461/4 "2022-05-06T15:36:55Z")

</div>