Project

General

Profile

Actions
Copy link

Feature #1139

closed

show alert.signature_id information in event_type drop eve.json

Added by Stefan Sabolowitsch about 10 years ago. Updated over 6 years ago.

Status:
Closed
Priority:
Normal
Assignee:
OISF Dev
Target version:
-
Effort:
Difficulty:
Label:

Description

It would be very helpful if you would see the alert.signature_id information in event_type drop eve.json.
You know otherwise not, what a rule has caused the drop.

Actions
Copy link

Also available in: Atom PDF