Project

General

Profile

Actions

Feature #6457

open

eve: configurable list of fields in output

Added by Philippe Antoine 7 months ago. Updated 7 months ago.

Status:
New
Priority:
Normal
Assignee:
Target version:
Effort:
Difficulty:
Label:

Description

Suricata should be able to get a schema.json as input :
This schema.json has a reduced number of fields compared to what Suricata can output.
The fields that are absent should not be output by Suricata (for instance we could have everything but dnp3.application.objects)


Related issues 1 (1 open0 closed)

Related to Suricata - Task #6443: Suricon 2023 brainstormAssignedVictor JulienActions
Actions #1

Updated by Philippe Antoine 7 months ago

  • Related to Task #6443: Suricon 2023 brainstorm added
Actions #2

Updated by Victor Julien 7 months ago

  • Tracker changed from Optimization to Feature
  • Subject changed from Configurable list of fields in output to eve: configurable list of fields in output
Actions

Also available in: Atom PDF