From 8f009cf9b575f21153a9b6b8c6ecff3d6401afa1 Mon Sep 17 00:00:00 2001
From: Jeff Lucovsky <jeff@lucovsky.org>
Date: Sat, 26 Sep 2020 08:29:43 -0400
Subject: [PATCH] output/json: Update threaded filename example

---
 suricata.yaml.in | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/suricata.yaml.in b/suricata.yaml.in
index 0ea4cdec7d..e521ca5b79 100644
--- a/suricata.yaml.in
+++ b/suricata.yaml.in
@@ -85,8 +85,8 @@ outputs:
       enabled: @e_enable_evelog@
       filetype: regular #regular|syslog|unix_dgram|unix_stream|redis
       filename: eve.json
-      # Enable for multi-threaded eve.json output; output files are suffixed
-      # with an identifier, e.g., eve.json.9.
+      # Enable for multi-threaded eve.json output; output files are amended with
+      # with an identifier, e.g., eve.9.json
       #threaded: false
       #prefix: "@cee: " # prefix to prepend to each log entry
       # the following are valid when type: syslog above