Actions
Task #7797
opendetect/alert: log event if discarding lower priority rule
Effort:
Difficulty:
Label:
Description
In corner case scenarios, if the PacketAlert queue limit is reached, a rule with
a lower internal priority may be discarded from the queue, and thus not generate alerts.
It seems a good idea to generate an event in this case (if possible).
As discussed in https://github.com/OISF/suricata/pull/13515#discussion_r2167522194.
No data to display
Actions