The build parameter for zeek-6.0.1 does not have --with-librdkafka, so how do I install the zeek-kafka plugin?

[puquanyang0326]

Summary of the issue

...

Expected behavior

...

Steps to reproduce

...

Where applicable, consider providing a patch that uses the end to end testing environment.

Logs, errors, etc.

...

Your environment

• Version of Zeek
• Version or commit hash of the zeek-kafka package
• Operating System and version

[ottobackwards]

zeek-kafka/README.md

Line 45 in 8d646db

1. Install the plugin using `zkg install`.

[ottobackwards]

zeek-kafka/configure.plugin

Line 34 in c14bc87

append_cache_entry LibRDKafka_ROOT_DIR PATH "${optarg}"

[ottobackwards]

It is not working? or have you just not found it?

[puquanyang0326]

I'm using librdkafka-1.4.4 version with zeek-6.0.2 and then wish to use zeek-kafka for log delivery, and am currently getting the following error. Although I've seen explanations on the web that the issue has been version iterated, attempts continue to fail. Any help would be appreciated, thanks. The error log is below: (base) ***@***.*** zeek-kafka-main]# ./configure --zeek-dist=/home/security-client/zeek-6.0.2 --with-librdkafka=/opt/librdkafka/ Build Directory : build Zeek Source Directory : /home/security-client/zeek-6.0.2 -- Using ZEEK_DIST: /home/security-client/zeek-6.0.2 CMake Warning at CMakeLists.txt:21 (find_package): By not providing "FindLibRDKafka.cmake" in CMAKE_MODULE_PATH this project has asked CMake to find a package configuration file provided by "LibRDKafka", but CMake did not find one. Could not find a package configuration file provided by "LibRDKafka" with any of the following names: LibRDKafkaConfig.cmake librdkafka-config.cmake Add the installation prefix of "LibRDKafka" to CMAKE_PREFIX_PATH or set "LibRDKafka_DIR" to a directory containing one of the above files. If "LibRDKafka" provides a separate development package or SDK, be sure it has been installed. CMake Error at CMakeLists.txt:39 (message): LibRDKafka not found. 在 2023-11-06 08:07:44，"Otto Fowler" ***@***.***> 写道： It is not working? or have you just not found it? — Reply to this email directly, view it on GitHub, or unsubscribe. You are receiving this because you authored the thread.Message ID: ***@***.***>