[Oisf-users] eve.json VERY noisy with stats

Peter Manev petermanev at gmail.com
Thu Nov 17 14:04:15 UTC 2016


On Thu, Nov 17, 2016 at 1:41 PM, erik clark <philosnef at gmail.com> wrote:
> Right now I am getting a massive number of "event_type":"stats" json
> entries. Like, a whole lot... Can I somehow reduce the frequency that stats
> are written to eve.json?

Can you try adjusting the interval -
https://redmine.openinfosecfoundation.org/projects/suricata/repository/revisions/master/entry/suricata.yaml.in#L123


>
>
> _______________________________________________
> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> Suricata User Conference November 9-11 in Washington, DC: http://suricon.net



-- 
Regards,
Peter Manev



More information about the Oisf-users mailing list