Project

General

Profile

Actions
Copy link

Feature #8516

open
JI OD

http: include server header in default eve record as a field

Feature #8516: http: include server header in default eve record as a field

Added by Jason Ish 3 days ago. Updated 1 day ago.

Status:
Triaged
Priority:
Normal
Assignee:
OISF Dev
Target version:
9.0.0-beta1
Effort:
Difficulty:
Label:

Description

Currently, to get the server header field, you need to dump all headers and extract it from the array. As the server header is commonly used, it makes sense to hoist it up like the user-agent and content-type.

Related issues 2 (2 open — 0 closed)

Related to Suricata - Bug #6173: http: loss of backward compatibility in HTTP logs from v6 to v7NewOISF DevActions
Copied to Suricata - Feature #8520: quic: include server header in default eve record as a field FeedbackOISF DevActions
Actions
Copy link

Also available in: PDF Atom