Project

General

Profile

Actions

Feature #2380

closed
VJ OD

[discussion] deprecate: 'alert syslog' output

Feature #2380: [discussion] deprecate: 'alert syslog' output

Added by Victor Julien over 8 years ago. Updated 10 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Effort:
Difficulty:
Label:

Description

'alert syslog' is a duplicated output from the fast log. I wonder if it makes sense to add support for syslog to fast log and get rid of the separate syslog output.


Related issues 3 (1 open2 closed)

Related to Suricata - Task #6544: logging: deprecate syslogClosedJason IshActions
Related to Suricata - Task #7589: eve: deprecate syslog filetype for eveRejectedOISF DevActions
Related to Suricata - Task #7737: fast log: add syslog as an file typeNewOISF DevActions

AH Updated by Andreas Herz over 8 years ago Actions #1

  • Assignee set to OISF Dev
  • Target version set to TBD

so you would add this as an option for fast.log?

VJ Updated by Victor Julien over 7 years ago Actions #2

Yes, like the way eve can be steered to various types of output.

JI Updated by Jason Ish over 1 year ago Actions #3

  • Related to Task #6544: logging: deprecate syslog added

JI Updated by Jason Ish 10 months ago Actions #4

  • Related to Task #7589: eve: deprecate syslog filetype for eve added

JI Updated by Jason Ish 10 months ago Actions #5

  • Related to Task #7737: fast log: add syslog as an file type added

JI Updated by Jason Ish 10 months ago Actions #6

  • Status changed from Feedback to Closed

Done by #6544

Actions

Also available in: PDF Atom