Desktop application to efficiently search and analyze super-structured data. Powered by Zed. Zed is a system that makes data easier by utilizing our new super-structured data model. Brim is a desktop app to explore, query, and shape the data in your super-structured data lake. Brim is an open source desktop application for security and network specialists. Brim makes it easy to search and analyze data from packet captures, like those created by Wireshark, and structured logs, especially from the Zeek network analysis framework. Brim is especially useful to security and network operators that need to handle large packet captures, especially those that are cumbersome for Wireshark, tshark, or other packet analyzers. Inspired by the Unix-tools design pattern, everything Brim does can be run from the command line. Think of Brim's components like Lego blocks that you can easily interconnect and assemble. It’s all open source, so have a look.
Features
- Open source and free
- Brim provides a rich query language
- Brim is packaged as a desktop app
- Brim stores all its data in the new data format ZNG
- The Brim backend is built from the ground up using Go
- When Brim runs on your desktop, there's a miniature Zed server running in the background