Project

General

Profile

Actions
Copy link

Documentation #6685

closed
JF JL

userguide: explain noalert keyword

Documentation #6685: userguide: explain noalert keyword

Added by Juliana Fajardini Reichow over 2 years ago. Updated about 2 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Jeff Lucovsky
Target version:
8.0.0-beta1
Affected Versions:
Effort:
Difficulty:
Label:

Description

We mention noalert in passing when talking or describing other keywords (especially flow ones), but not as its own keyword.
Considering any rule could use this, makes sense to add its own description.

Related issues 1 (0 open — 1 closed)

Related to Suricata - Feature #5466: detect: allow alert-then-pass logicClosedVictor JulienActions
Actions
Copy link

Also available in: PDF Atom