https://redmine.openinfosecfoundation.org/https://redmine.openinfosecfoundation.org/favicon.ico?17011170022017-05-03T16:15:18ZOpen Information Security FoundationSuricata - Bug #2091: nonexistent/misspelled custom fields accepted during parsing of suricata.yamlhttps://redmine.openinfosecfoundation.org/issues/2091?journal_id=81892017-05-03T16:15:18ZAndreas Herzoisf@herzandreas.de
<ul><li><strong>Assignee</strong> set to <i>OISF Dev</i></li><li><strong>Target version</strong> set to <i>TBD</i></li></ul> Suricata - Bug #2091: nonexistent/misspelled custom fields accepted during parsing of suricata.yamlhttps://redmine.openinfosecfoundation.org/issues/2091?journal_id=129012019-07-09T21:56:22ZAndreas Herzoisf@herzandreas.de
<ul></ul><p>But it doesn't hurt either right?</p> Suricata - Bug #2091: nonexistent/misspelled custom fields accepted during parsing of suricata.yamlhttps://redmine.openinfosecfoundation.org/issues/2091?journal_id=129522019-07-11T16:13:32ZJason Ishjason.ish@oisf.net
<ul></ul><p>Andreas Herz wrote:</p>
<blockquote>
<p>But it doesn't hurt either right?</p>
</blockquote>
<p>Doesn't hurt, but may improve user experience. Just in case you entered "receved" by accident and can't figure out why you are not seeing that in the output.</p> Suricata - Bug #2091: nonexistent/misspelled custom fields accepted during parsing of suricata.yamlhttps://redmine.openinfosecfoundation.org/issues/2091?journal_id=129562019-07-12T07:28:54ZPeter Manevpetermanev@gmail.com
<ul></ul><p>Also it may not err on a filed we don't parse or support yet and leave the user with the wrong impression that everything is ok and expecting to see those values.</p>