Project

General

Profile

Actions
Copy link

Feature #1139

closed

show alert.signature_id information in event_type drop eve.json

Added by Stefan Sabolowitsch over 10 years ago. Updated about 7 years ago.

Status:
Closed
Priority:
Normal
Assignee:
OISF Dev
Target version:
-
Effort:
Difficulty:
Label:

Description

It would be very helpful if you would see the alert.signature_id information in event_type drop eve.json.
You know otherwise not, what a rule has caused the drop.

Actions
Copy link
 #1

Updated by Andreas Herz almost 9 years ago

  • Assignee set to OISF Dev
  • Target version set to TBD
Actions
Copy link
 #2

Updated by Peter Manev almost 9 years ago

  • Status changed from New to Closed

Implemented.

Actions
Copy link
 #3

Updated by Victor Julien about 7 years ago

  • Target version deleted (TBD)
Actions
Copy link

Also available in: Atom PDF