dox/userguide: add tx_cnt documentation

3 months ago · adfa46ab1c
parent 0044b5f682
commit adfa46ab1c
1 changed files with 1 additions and 0 deletions
--- a/doc/userguide/output/eve/eve-json-format.rst
+++ b/doc/userguide/output/eve/eve-json-format.rst
@ -1691,6 +1691,7 @@ Fields
 * "reason": mechanism that did trigger the end of the flow (include "timeout", "forced" and "shutdown")
 * "alerted": "true" or "false" depending if an alert has been seen on flow
 * "action": "pass" or "drop" depending if flow was PASS'ed or DROP'ed (no present if none)
+* "tx_cnt": number of transactions seen in the flow (only present if flow has an application layer)
 * "exception_policy": array consisting of exception policies that have been triggered by
  the flow: