[Oisf-users] eve.json logging issues

erik clark philosnef at gmail.com
Thu Nov 17 17:35:21 UTC 2016


I am getting the following event_types in my eve.json:


http
fileinfo

I have

http:
   enabled: no

in my yaml, but for whatever reason I am still getting these events. The
ONLY events I want are for the ones that fire on my emerging threat and
custom rules. What am I doing wrong? Thanks!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20161117/1f4664d0/attachment.html>


More information about the Oisf-users mailing list