You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
suricata/doc/userguide/output
Jason Ish 029fd1be59 eve: add rule generation source to alert record
When an alert is generated from firewall context, add an engine value of
"fw", otherwise "td" (for threat detect).

The engine field is only added when firewall mode is enabled.

Ticket: #8456
3 months ago
..
eve eve: add rule generation source to alert record 3 months ago
files-json/elk
custom-http-logging.rst
custom-tls-logging.rst
index.rst
log-rotation.rst
lua-output.rst
syslog-alerting-comp.rst