Loading this script will cause all logs to be written out as JSON by default.
policy/tuning/track-all-assets.bro
policy/tuning/defaults/extracted_file_limits.bro