I want to disable log rotation in the zeek it creates lot of folder in the /opt/zeek/logs/current/ and put log files in it and archive them. I don’t want this behavior because of that I disabled the log rotation interval in the /opt/zeek/etc/zeekctl.cfg but it still do that!!!
second problem is it stores pcap files in the /opt/zeek/spool/extract_files . I disabled the policy extract all files in the local.zeek but didn’t solved!!!?