-
Notifications
You must be signed in to change notification settings - Fork 44
Expand file tree
/
Copy pathstandalone
More file actions
44 lines (39 loc) · 1.81 KB
/
Copy pathstandalone
File metadata and controls
44 lines (39 loc) · 1.81 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
### BTest baseline data generated by btest-diff. Do not edit. Use "btest -U/-u" to update. Requires BTest >= 0.63.
# Automatically generated. Do not edit.
redef Notice::mail_dest = "zeekctltest@somedomain";
redef Notice::mail_dest_pretty_printed = "zeekctltest2@somedomain2";
redef Notice::sendmail = "/path/to/sendmail";
redef Notice::mail_subject_prefix = "This is Subject";
redef Notice::mail_from = "zeekctltestuser@mydomain";
redef Broker::table_store_db_directory = "XXXXXXXX";
redef Log::default_rotation_interval = 12345 secs;
redef Log::default_mail_alarms_interval = 98765 secs;
redef Pcap::snaplen = 1212;
redef Pcap::bufsize = 256;
redef global_hash_seed = "XXXXXXXX";
redef Cluster::default_store_dir = "XXXXXXXX";
redef FileExtract::prefix = "XXXXXXXX/" + Cluster::node;
@if ( |Telemetry::metrics_address| == 0 )
redef Telemetry::metrics_address = "0.0.0.0";
@endif
# Begin code from cluster_backend_zeromq plugin
# Enable ZeroMQ - the zeromq/connect script was deprecated with 8.1
@if ( Version::at_least("8.1.0") )
@load policy/frameworks/cluster/backend/zeromq
@else
@load policy/frameworks/cluster/backend/zeromq/connect
@endif
redef Cluster::Backend::ZeroMQ::listen_xpub_endpoint = "tcp://127.0.0.1:27760";
redef Cluster::Backend::ZeroMQ::listen_xsub_endpoint = "tcp://127.0.0.1:27761";
redef Cluster::Backend::ZeroMQ::connect_xpub_endpoint = "tcp://127.0.0.1:27761";
redef Cluster::Backend::ZeroMQ::connect_xsub_endpoint = "tcp://127.0.0.1:27760";
redef Cluster::Backend::ZeroMQ::ipv6 = F;
# Standalone: Run the XPUB/XSUB thread in standalone mode
redef Cluster::Backend::ZeroMQ::run_proxy_thread = T;
# Standalone: Subscribe to zeek.cluster.node.zeek.
# for controllee WebSocket interactions.
event zeek_init()
{
Cluster::subscribe("zeek.cluster.node.zeek.");
}
# End code from cluster_backend_zeromq plugin