[Oisf-users] Question about thresholds

Carlos Lopez clopmz at outlook.com
Tue Oct 2 11:18:32 UTC 2018

Hi all,
 Maybe it is a stupid question, but is it not possible to configure a CIDR network to supress some alerts via threshold.conf?, for example:

suppress gen_id 1, sig_id 2101201, track by_src, ip

 If not, what can be the best strategy to accomplish this?

C. L. Martinez

More information about the Oisf-users mailing list