hello wath are the configuration file in bro (such as local.bro)and there role
The important ones are documented at https://www.bro.org/sphinx/quickstart/index.html.
Johanna