Project

General

Profile

Actions
Copy link

Feature #4974

closed
JI JL

eve: log rule references

Feature #4974: eve: log rule references

Added by Jason Ish about 4 years ago. Updated about 1 year ago.

Status:
Closed
Priority:
Normal
Assignee:
Jeff Lucovsky
Target version:
8.0.0-beta1
Effort:
Difficulty:
Label:

Description

Its been discussed a few time of references should be logged to eve. This would give alerts more context without access to the rule. However, logging the rule is also an option.

The reference logged should probably be the fully expanded reference.

Actions
Copy link

Also available in: PDF Atom