Project

General

Profile

Actions
Copy link

Task #6849

open

brainstorm: should certain eve ouput types be removed (eg syslog)

Added by Juliana Fajardini Reichow 9 months ago. Updated 3 months ago.

Status:
New
Priority:
Normal
Assignee:
OISF Dev
Target version:
8.0.0-beta1
Effort:
Difficulty:
Label:

Description

Some eve filetypes do not allow large enough records for even common use like stats records (8k).
Should we move to something like file instead of using the standard syslog output;
maybe allow EVE filetype to be configurable in terms of what verbosity or other aspects.

Related issues 1 (1 open — 0 closed)

Related to Suricata - Task #6851: eve/syslog: stats message too long for many default configurationsNewOISF DevActions
Actions
Copy link
 #1

Updated by Juliana Fajardini Reichow 9 months ago

  • Description updated (diff)
Actions
Copy link
 #2

Updated by Jason Ish 9 months ago

  • Related to Task #6851: eve/syslog: stats message too long for many default configurations added
Actions
Copy link
 #3

Updated by Jason Ish 3 months ago

  • Subject changed from brainstorm: should certain ouput types be removed (eg syslog) to brainstorm: should certain eve ouput types be removed (eg syslog)
Actions
Copy link

Also available in: Atom PDF