Tag: conn.log

How to Write Zeek Logs in JSON & TSV Simultaneously
Johanna Amann
|
Apr 29, 2026
|
- How-to
- logging
Zeek can write the same log stream in multiple formats simultaneously. If you need JSON for your SIEM and TSV for long-term archives, you’re in luck: a few lines of code handles both. There are several…
read more about How to Write Zeek Logs in JSON & TSV Simultaneously
Reduce conn.log from 35GB to 5GB with a Simple Hook
Michelle Pathe
|
Mar 31, 2026
|
- Community
- How-to
Blocking scanners at your network edge solves one problem but creates another: Zeek will log every failed connection attempt, filling conn.log with noise from hosts you’ve already blocked. A simple log filtering hook can eliminate this…
read more about Reduce conn.log from 35GB to 5GB with a Simple Hook