logs

The IDS formerly known as Bro IDS has been known as Zeek for a while now. In general, additions added to RITA after this rename have used Zeek while additions added in before the rename used Bro. Now, we have areas of the code where we refer to Bro and Zeek interchangeably. This could lead to confusion if someone was not aware of the name change.

As such, we should replace all of the old re

In the "New Query" modal, I think it makes sense to auto focus the name field input instead of the query.

The user will presumably have a query they want to save, click the start, then name it.

Autofocusing the name makes accomplishing those tasks a little quicker.

Right now button to execute search and button to turn-on search auto refresh are near each other and look almost the same. This may lead to confusion, like in this video https://www.youtube.com/watch?v=k9VdL1Raicc.

Turning on search auto-refresh should perform search immediately and turn on follow file mode. Button icon should be changed to something more similar to follow-mode icon in top tool