Good Evening Bro Community,
I have an issue I need resolving about running bro as a user or group or at least writing logs as a certain user or group.
I have a script that performs a search through my bro logs, groups the results by file location(conn,http,dns),
applies the headers of each file type to each group, and then formats everything in csv.
Next, I pull down the data through a simple web interface.
The problem I am having is that apache can’t access my bro logs and I don’t see a way that I can just tell bro
to write all it’s logs as a certain user.
- Is there an option to tell bro to write logs as user somebody or group somebody?
- Is there a way to run bro as a different user other than root?
I am using bro-2.4.
I have looked through the ./configure and there are no options for group or user in there.
Thanks,
Adam Hall