@load policy/misc/capture-loss.zeek redef CaptureLoss::watch_interval = 1 min; event zeek_init() &priority=-10 { for(stream_id in Log::active_streams) { if(stream_id == CaptureLoss::LOG) { Log::add_default_filter(stream_id); } } }