-
Notifications
You must be signed in to change notification settings - Fork 1
/
conf_bro
30 lines (22 loc) · 1.02 KB
/
conf_bro
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
## Global BroControl configuration file.
# Recipient address for all emails send out by Bro and BroControl.
MailTo = root@localhost
# Site-specific policy script to load. Bro will look for this in
# $PREFIX/share/bro/site. A default local.bro comes preinstalled
# and can be customized as desired.
SitePolicyStandalone = isshd
# Location of the spool directory where files and data that are currently being
# written are stored.
SpoolDir = /var/opt/bro/spool
# Location of the log directory. This is longer term storage for rotated logs.
LogDir = /var/opt/bro/logs
# Rotation interval in seconds for log files on manager/standalone node.
LogRotationInterval = 3600
# Expiration interval for log files in LogDir. Files older than this many days
# will be deleted upon running "broctl cron".
# LogExpireInterval = 30
# Lower threshold for space available on the disk that holds SpoolDir. If less
# space is available, BroControl starts sending out warning emails.
MinDiskSpace = 5
# Logs debug information into spool/debug.log.
Debug = 1