configured splunk to ingest both bro and suricata logs reconfigured logger vagrant box to have 2 CPUs and 4GB of RAM
		
			
				
	
	
		
			18 lines
		
	
	
		
			352 B
		
	
	
	
		
			Desktop File
		
	
	
	
	
	
			
		
		
	
	
			18 lines
		
	
	
		
			352 B
		
	
	
	
		
			Desktop File
		
	
	
	
	
	
[Unit]
 | 
						|
Description=Bro
 | 
						|
After=network.target
 | 
						|
 | 
						|
[Service]
 | 
						|
ExecStartPre=-/opt/bro/bin/broctl cleanup
 | 
						|
ExecStartPre=/opt/bro/bin/broctl check
 | 
						|
ExecStartPre=/opt/bro/bin/broctl install
 | 
						|
ExecStart=/opt/bro/bin/broctl start
 | 
						|
ExecStop=/opt/bro/bin/broctl stop
 | 
						|
RestartSec=10s
 | 
						|
Type=oneshot
 | 
						|
RemainAfterExit=yes
 | 
						|
TimeoutStopSec=600
 | 
						|
 | 
						|
[Install]
 | 
						|
WantedBy=multi-user.target
 |