Project

General

Profile

Actions

Documentation #6685

closed

userguide: explain noalert keyword

Added by Juliana Fajardini Reichow 3 months ago. Updated 10 days ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

We mention noalert in passing when talking or describing other keywords (especially flow ones), but not as its own keyword.
Considering any rule could use this, makes sense to add its own description.


Related issues 1 (1 open0 closed)

Related to Suricata - Feature #5466: detect: allow alert-then-pass logicIn ReviewVictor JulienActions
Actions #1

Updated by Juliana Fajardini Reichow 3 months ago

  • Related to Feature #5466: detect: allow alert-then-pass logic added
Actions #2

Updated by Jeff Lucovsky about 2 months ago

  • Status changed from New to In Review
  • Assignee changed from OISF Dev to Jeff Lucovsky
Actions #4

Updated by Jeff Lucovsky 10 days ago

  • Status changed from In Review to Closed
Actions

Also available in: Atom PDF