Project

General

Profile

Actions
Copy link

Feature #5221

closed

Modify filter to add metadata

Added by Jason Ish about 2 years ago. Updated about 2 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Jason Ish
Target version:
1.2.4
Effort:
Difficulty:
Label:

Description

Add an option to modify.conf to allow for each adding of new metadata. Possible examples:

# Add metadata.
metadata-add re:"SURICATA STREAM" "evebox.action" "archive" 
metadata-add 2010646 "evebox.action" "archive"

Actions
Copy link

Also available in: Atom PDF