////
This file is generated! See scripts/docs_collector.py
////

[[filebeat-module-zeek]]
[role="xpack"]

:modulename: zeek
:has-dashboards: true

== Zeek (Bro) Module

This is a module for https://zeek.org/[Zeek], which used to be called Bro. It
parses logs that are in the Zeek JSON format.

include::../include/gs-link.asciidoc[]

[float]
=== Compatibility

This module has been developed against Zeek 2.6.1, but is expected to work
with other versions of Zeek.

Zeek requires a Unix-like platform, and it currently supports Linux, FreeBSD,
and Mac OS X.

[float]
=== Example dashboard

This module comes with a sample dashboard. For example:

[role="screenshot"]
image::./images/kibana-zeek.png[]

:has-dashboards!:

:modulename!:



[float]
=== Fields

For a description of each field in the module, see the
<<exported-fields-zeek,exported fields>> section.

