[Oisf-users] Enhancement: SID Information in drop file/json

Stefan Sabolowitsch Stefan.Sabolowitsch at felten-group.com
Wed Feb 12 10:50:29 UTC 2014

Previous message (by thread): [Oisf-users] Problem found // Get from eve.json-> "event_type = file" parser error in elasticsearch
Next message (by thread): [Oisf-users] Suricata 2.0rc1 Available!
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hi all,
It would be good if you can find „alert.signature_id" in drop file/json.
So, you would see directly what SID has caused the drop.

regards
Stefan

Previous message (by thread): [Oisf-users] Problem found // Get from eve.json-> "event_type = file" parser error in elasticsearch
Next message (by thread): [Oisf-users] Suricata 2.0rc1 Available!
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

More information about the Oisf-users mailing list