Reducing Zeek JSON Log Size: Field Name Mapping and Log Filtering Hooks
Zeek’s JSON logs can get large quickly, especially if you’re ingesting them into a SIEM that charges by data volume. There are two ways to address this: filtering out uninteresting log lines, and renaming fields to…
read more about Reducing Zeek JSON Log Size: Field Name Mapping and Log Filtering Hooks