airbnb / airbnb/streamalert

Log schema - Bro (network security monitor)

Open
#98 0 comments 0 reactions 0 assignees View on GitHub
help wanted log schemas
Dominant language
Python
Stars
2.9k
Forks
324
PR merge metrics
No merged PRs in 30d

Description

What:
- https://www.bro.org/
- Add log schemas to `conf/logs.json`
- https://www.bro.org/sphinx/script-reference/log-files.html

Contributor guide

Open the contributing guide

Research direction

Read conf/logs.json and the Bro log-files reference linked in the issue to identify the schemas that need to be represented. Add the requested Bro log schemas there, then verify that the file remains valid JSON and that the schemas cover the documented log fields.

Written by the indexing model from the issue text.

Assessment

Tech stack
json
Domain
security
Issue type
Feature
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Clearly specified
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.