[Oisf-users] "sensor-name" in "stats" EVE?

Champ Clark III cclark at quadrantsec.com
Tue Aug 4 16:36:19 UTC 2020


Hello! I hope all is well with the Suricata team! 

I had a quick question. When using Suricata "stats" (EVE output), is it possible to include the "sensor-name" from the configuration within the "stats" file? This way, this could be an identifier about "where" the "stats" are coming from. This could be useful for when you have multiple sensors out in the field. 

Thank you! 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20200804/5988ac53/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2132 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20200804/5988ac53/attachment.bin>


More information about the Oisf-users mailing list