Project

General

Profile

Actions

Documentation #9123

open
JF JF

userguide: clarify thresholding workings

Documentation #9123: userguide: clarify thresholding workings

Added by Juliana Fajardini Reichow 1 day ago. Updated about 11 hours ago.

Status:
In Review
Priority:
Normal
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

The docs and the code don't fully agree on what detection_filter and threshold: type threshold do.

(especially true with regards to the first Note in the Thresholding Keywords section: https://docs.suricata.io/en/suricata-8.0.7/rules/thresholding.html#thresholding-keywords)

Fix the documentation so it reflects what the code actually does.


Subtasks 1 (1 open — 0 closed)

Documentation #9124: userguide: clarify thresholding workings (8.0.x backport)AssignedJuliana Fajardini ReichowActions

OT Updated by OISF Ticketbot 1 day ago Actions #1

  • Subtask #9124 added

OT Updated by OISF Ticketbot 1 day ago Actions #2

  • Label deleted (Needs backport to 8.0)

JF Updated by Juliana Fajardini Reichow about 11 hours ago Actions #3

  • Subject changed from userguide: clarify detect_filter workings to userguide: clarify thresholding workings

JF Updated by Juliana Fajardini Reichow about 11 hours ago Actions #4

  • Status changed from Assigned to In Review
Actions

Also available in: PDF Atom