i made it worked with bro -> json -> syslog...
# general
j
i made it worked with bro -> json -> syslog -> osquery syslog