Project

General

Profile

Actions
Copy link

Feature #4408

open

definitive log count mode for qa purposes

Added by Peter Manev over 3 years ago. Updated 5 months ago.

Status:
New
Priority:
Normal
Assignee:
OISF Dev
Target version:
TBD
Effort:
Difficulty:
Label:

Description

Often enough it happens that the count of alert and other logs may have slight variations when reading large/big pcaps.
This could be due to many reasons like flow timeouts/randomization of windows etc.
It would be nice to have some sort of a definitive count QA run mode to compare diff QA/branches runs and be able to easier spot regressions.

Actions
Copy link

Also available in: Atom PDF