Zeek 8 Megathread

This is the Zeek 8 megathread to discuss all topics related to the recent release.

Purpose

This is a place to:

  • Share your experiences upgrading or running Zeek 8
  • Ask questions about new features and changes
  • Post tips or resources to help others
  • Report feedback to the community

What’s New in Zeek 8

  • Storage framework enhancements
  • Customizable flow tuples
  • Improved protocol analysis
  • Spicy improvements

:pencil: Release notes
:books: Announcement

:speech_balloon: How to Use This Thread

  • If you’ve upgraded already: tell us what worked well (or didn’t!)
  • If you’re testing: share configs, tuning tips, and cluster setups
  • If you’re new to Zeek 8: ask questions! No question is too small

Thanks to our contributors + we’re looking forward to hearing what you think!