Actions
Feature #5561
closedSupport metadata matching
Description
The idea is to allow matching based on metadata (without regular expressions). Some syntax like:
metadata: performance_impact == significant
Not sure if that works for modify.conf, but gets the idea across.
Updated by Jason Ish about 2 years ago
- Status changed from New to In Review
First cut: https://github.com/OISF/suricata-update/pull/320
Doesn't support modify.conf yet.
Updated by Jason Ish almost 2 years ago
- Status changed from In Review to Closed
- Target version changed from 1.3.0 to 1.2.6
Merged to master and master-1.2.x.
Updated by Jason Ish almost 2 years ago
- Assignee changed from OISF Dev to Jason Ish
Actions