This script defines a postprocessing function that can be applied
to a logging filter in order to automatically SCP (secure copy)
a log stream (or a subset of it) to a remote host at configurable
rotation time intervals. Generally, to use this functionality
you must handle the
zeek_init event and do the following
in your handler:
Add the filter to a logging stream using
Default naming format for timestamps embedded into log filenames that use the SCP rotator.
A table indexed by a particular log writer and filter path, that yields a set of remote destinations.
A container that describes the remote destination for the SCP command
A table indexed by a particular log writer and filter path, that yields a set of remote destinations. The
Log::scp_postprocessorfunction queries this table upon log rotation and performs a secure copy of the rotated log to each destination in the set. This table can be modified at run-time.
A container that describes the remote destination for the SCP command argument as
Secure-copies the rotated log to all the remote hosts defined in
Log::scp_destinationsand then deletes the local copy of the rotated log. It’s not active when reading from trace files.
A record holding meta-information about the log file to be postprocessed.
True if secure-copy system command was initiated or if no destination was configured for the log as described by info.