Suricata

I think can be useful to have a blacklist filter functionality to disallow HTTP logging of web sites that match a list of regex on FQDNs.

From my point of view having logs about some web site like for example advertising web sites it's not useful from a security point of view and also it's a waste of hard disk space and computational power.

I thin can be useful to have an external file ( ex: disable_http_logging.sites ) that contains a list of regex ( ex: *.google\.com, .*advertising\.com ) that disallow HTTP logging functionality on matched regexp.