[Oisf-users] suricata vlan log - onionsecurity is ok, selks ko

[john nesh]

Hi,

I am facing a different behaviour regarding vlans in logs.
I made an installation of securityonion and vlan worked log in eve.json
worked flawlessy but not in selks.
I have read that vlan behaviour had changed in 2.1

in my suricata.yaml I have:

 vlan:
   use-for-tracking: true

But I have no log in eve.json.
Is this an expected behaviour?

John
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20150226/ca17dfe1/attachment.html>