Project

General

Profile

Actions

Feature #1499

closed

json output for engine messages

Added by Victor Julien about 7 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Effort:
Difficulty:
Label:

Description

https://github.com/inliniac/suricata/pull/1578

Enable through:

logging:
  default-log-level: notice
  #default-log-format: "[%i] %t - (%f:%l) <%d> (%n) -- " 
  default-output-filter:
  # Define your logging outputs.  If none are defined, or they are all
  # disabled you will get the default - console output.
  outputs:
  - console:
      enabled: yes
  - file:
      enabled: yes
      filename: /var/log/suricata.log
  - file:
      enabled: yes
      type: json
      filename: /var/log/suricata.json
  - syslog:
      enabled: no
      facility: local5
      format: "[%i] <%d> -- " 

No data to display

Actions

Also available in: Atom PDF