Config

/opt/zeek/bin/zeekctl

Defaults

root:zeek

zeek:zeek

Articles

https://www.activecountermeasures.com/where-do-i-put-my-zeek-sensor/