This package adds the
_interface field to Zeek logs to indicate which
interface generated a log entry. By default the field is only added to
conn.log. For further configuration, the following options are
|Enables interfaces for all active streams|
|Streams not to add interfaces for|
|Streams to add interfaces for|
If Zeek is not executed in cluster mode, the field is not added.