Bug #6420: dns/eve: an empty format section results in no response details being logged - Suricata - Open Information Security Foundation

Actions

Copy link

Bug #6420

closed

dns/eve: an empty format section results in no response details being logged

Added by Jason Ish about 1 year ago. Updated about 1 year ago.

Status:

Closed

Priority:

Normal

Assignee:

Jason Ish

Target version:

7.0.3

Affected Versions:

6.0.15, 7.0.2

Effort:

Difficulty:

Label:

Description

If the eve DNS format field is not set at all you get grouped and an array of answers. If it is set, but has no value you get no answers at all. This is surely not the intention. If set, but empty it should use the default which is grouped and an array. If the format is uncommented, at least one output type should be chosen.

Subtasks 1 (0 open — 1 closed)