brologs:
  enabled:
    - conn
    - dce_rpc
    - dhcp
    - dhcpv6
    - dnp3
    - dns
    - dpd
    - files
    - ftp
    - http
    - intel
    - irc
    - kerberos
    - modbus
    - mqtt
    - notice
    - ntlm
    - openvpn
    - pe
    - radius
    - rfb
    - rdp
    - signatures
    - sip
    - smb_files
    - smb_mapping
    - smtp
    - snmp
    - software
    - ssh
    - ssl
    - syslog
    - telnet
    - tunnel
    - weird
    - mysql
    - socks
    - x509
    
  disabled: