Zeek Workshop CERN 2026 | Geneva | March 25–26 Register Now

The Storage Framework in Action

by | Sep 4, 2025 | 8.0

I’ve talked in a video and a blog post recently about the new Zeek storage framework. This blog post expands upon those previous posts to explain how to actually use the framework. It will do this by adapting an existing policy script to use the new features to...

Zeek’s Storage Framework Explained

by | Sep 4, 2025 | 8.0

Until Zeek 7.2, storing data across a cluster could be tricky and inefficient. The new Storage Framework changes that. This post explains the old model, the new framework, and what’s coming next. The Old Model: Broker Storage Storage in Zeek traditionally has run...

ZeroMQ Cluster Backend: Try It Out in Zeek 8

by | Aug 28, 2025 | 8.0

With Zeek 8.0, we’re taking the first step toward a major shift in cluster communication. A new ZeroMQ backend is now available, making it simpler to run clusters and opening the door for more flexible backends in the future. Prefer a quick walkthrough? Check out our...

Introducing Zeek 8

by | Aug 22, 2025 | 8.0, development, release, Spicy, Zeek

We’re proud to announce the release of Zeek 8.0! This release introduces a range of technical innovations and culminates architectural improvements we’ve been working on since the release of Zeek 7 a year ago. Customizable Flow Tuples For the first time ever, it’s now...