Loading this script will cause all logs to be written out as JSON by default.
policy/tuning/logs-to-elasticsearch.bro
policy/tuning/defaults/extracted_file_limits.bro