Write logs from worker node directly

Zeek
1

Is it possible to write logs directly from the worker node instead of making a call out to a logging node?

2

I believe

redef Log::enable_remote_logging = F;

will do that. Not sure if rotation works by default so you might have
a little more work to do if you are logging to files. If you're using
something like the Kafka log writer then it should just work

3

I am curious, why do you want to do this. What would be your use-case ?

Aashish

4

Appreciated will investigate

5

Exploring different tuning options. Specifically, is there any benefit / detriment to writing logs locally thereby removing the additional call to another node.