This package adds the
_interface field to Zeek logs to indicate which
interface generated a log entry. By default the field is only added to
conn.log. For further configuration, the following options are
||Enables interfaces for all active streams|
||Streams not to add interfaces for|
||Streams to add interfaces for|
If Zeek is not executed in cluster mode, the field is not added.