Hi, If possible, could you add detecting for duplicate sig please? for example, if I add two file contains same sig, like: ... - snmp.rules ... - snmp.rules ... all sigs in theses files (snmp.rules) generating two alerts... Maybe it's a good idea for detecting this. Regards Rmkml