[Oisf-users] Stream data in alert-debug.log?

Matt matt at somedamn.com
Tue Apr 9 15:16:48 UTC 2013


I've noticed that some of my debug alerts have stream data, and some 
don't.  What triggers that?  If it isn't deterministic, how can I 
maximize the chances of getting stream data?  I'm guessing the stream 
data just gets written if it happens to be there in memory. Maybe 
increase the size of the stream memcap?  Or raise max-sessions for it?

- Matt


More information about the Oisf-users mailing list