Where Them
Logs App
WTLA-01

Zeek

2 log locations · Linux

Zeek · Vendor documentation

Where Zeek keeps its logs

Zeek logs to /opt/zeek/logs/current/ on Linux. 1 other Linux log location is recorded below.

Paths are printed exactly as Zeek writes them. Environment variables like %LOCALAPPDATA% and $XDG_STATE_HOME are never expanded, so a path can be pasted straight into a shell. Where a path differs between installer types or shipping flavours, each one is racked as its own card below - why that happens.

Finding your way around Linux.

LNX

Zeek - Linux

Zeek
Live logs/opt/zeek/logs/current/- conn.log, dns.log and others. /usr/local/zeek for source builds.
Rotated, gzipped logs/opt/zeek/logs/<YYYY-MM-DD>/
Zeek log file locations - Linux · Where Them Logs App