Project

General

Profile

Actions

Feature #4393

open

Threshold default configuration

Added by Matteo Gruppi about 3 years ago. Updated about 2 years ago.

Status:
New
Priority:
Normal
Assignee:
Target version:
-
Effort:
Difficulty:
Label:

Description

Hi,
I've some trouble about the default configuration about suricata-update.
I don't find any reference in documentation.
To get a proper threshold configuration for suricata with suricata-update We've to do it via CLI:
suricata-update --threshold-in threshold-file-input --threshold-out threshold-file-output
And of course in suricata config (for example suricata.yaml) the reference about global threshold with:
threshold-file: threshold-file-output

But, there is a way like for disable, enable ecc with disable-conf, enable-conf, drop-conf ecc... to set threshold-file-input and threshold-file-output in the suricata-update config file (like the default one /etc/suricata/update.yaml)?

Many thanks
Veshialle

Actions

Also available in: Atom PDF