Project

General

Profile

Actions

Feature #5976

closed

eve/stats: allow hiding counters whose value is 0

Added by Juliana Fajardini Reichow about 1 year ago. Updated 10 days ago.

Status:
Closed
Priority:
Normal
Target version:
Effort:
Difficulty:
Label:

Description

Our stats event can have a big number of counters that will be zero.
We want to offer the ability to hide such counters, to improve readability.

This can be a bit trickier as there are:
- counters that are 0 because they're not in use
- counters that are 0 because... they were not incremented.

We should probably reach out to users before deciding on an approach for this one.


Related issues 2 (1 open1 closed)

Related to Suricata - Task #6929: eve/stats: hide zero-values for counters individuallyIn ProgressJuliana Fajardini ReichowActions
Related to Suricata - Task #6962: yaml: unify 0 stats counter config option terminologyClosedJuliana Fajardini ReichowActions
Actions #1

Updated by Juliana Fajardini Reichow 22 days ago

Possible solution, although extremely simplistic (I guess): https://github.com/OISF/suricata/pull/10756/commits/87a4d0022601e0cc1fcd56a1923f18d5cee2058c

(done as a side effect to work on exception policy stats)

Actions #2

Updated by Juliana Fajardini Reichow 21 days ago

  • Assignee changed from OISF Dev to Juliana Fajardini Reichow
Actions #3

Updated by Juliana Fajardini Reichow 21 days ago

  • Status changed from New to In Review
Actions #4

Updated by Juliana Fajardini Reichow 17 days ago

  • Related to Task #6929: eve/stats: hide zero-values for counters individually added
Actions #5

Updated by Juliana Fajardini Reichow 10 days ago

  • Status changed from In Review to Closed
Actions #6

Updated by Juliana Fajardini Reichow 9 days ago

  • Related to Task #6962: yaml: unify 0 stats counter config option terminology added
Actions

Also available in: Atom PDF