You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
suricata/doc/userguide/output/eve
Jason Ish 029fd1be59 eve: add rule generation source to alert record
When an alert is generated from firewall context, add an engine value of
"fw", otherwise "td" (for threat detect).

The engine field is only added when firewall mode is enabled.

Ticket: #8456
3 months ago
..
eve-json-examplesjq.rst
eve-json-format.rst eve: add rule generation source to alert record 3 months ago
eve-json-output.rst doc/config: Update flushing description 5 months ago
index.rst