/etc/bro/broctl.cfg is in broctl 1.4-1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 | ## Global BroControl configuration file.
###############################################
# Mail Options
# Recipient address for all emails sent out by Bro and BroControl.
MailTo = root@localhost
# Mail connection summary reports each log rotation interval. A value of 1
# means mail connection summaries, and a value of 0 means do not mail
# connection summaries. This option has no effect if the trace-summary
# script is not available.
MailConnectionSummary = 1
# Lower threshold (in percentage of disk space) for space available on the
# disk that holds SpoolDir. If less space is available, "broctl cron" starts
# sending out warning emails. A value of 0 disables this feature.
MinDiskSpace = 5
# Send mail when "broctl cron" notices the availability of a host in the
# cluster to have changed. A value of 1 means send mail when a host status
# changes, and a value of 0 means do not send mail.
MailHostUpDown = 1
###############################################
# Logging Options
# Rotation interval in seconds for log files on manager (or standalone) node.
# A value of 0 disables log rotation.
LogRotationInterval = 3600
# Expiration interval for log files in LogDir. Files older than this many days
# will be deleted upon running "broctl cron". A value of 0 means that logs
# never expire.
LogExpireInterval = 0
# Enable BroControl to write statistics to the stats.log file. A value of 1
# means write to stats.log, and a value of 0 means do not write to stats.log.
StatsLogEnable = 1
# Number of days that entries in the stats.log file are kept. Entries older
# than this many days will be removed upon running "broctl cron". A value of 0
# means that entries never expire.
StatsLogExpireInterval = 0
###############################################
# Other Options
# Show all output of the broctl status command. If set to 1, then all output
# is shown. If set to 0, then broctl status will not collect or show the peer
# information (and the command will run faster).
StatusCmdShowAll = 1
# Site-specific policy script to load. Bro will look for this in
# $PREFIX/share/bro/site. A default local.bro comes preinstalled
# and can be customized as desired.
SitePolicyStandalone = local.bro
# Location of the log directory where log files will be archived each rotation
# interval.
LogDir = /var/log/bro
# Location of the spool directory where files and data that are currently being
# written are stored.
SpoolDir = /var/spool/bro
# Location of other configuration files that can be used to customize
# BroControl operation (e.g. local networks, nodes).
CfgDir = /etc/bro
|