Snort Log Method

["Pedro Tedeschi" <pedro.tedeschi () frb-par com>]

Hi,

If is possible to snort log just one unique event per IP?

Like this

The IP 1.1.1.1 have attacked 345 times on same signature "WEB-IIS cmd.exe access"
But i want to log just one time this attack and discard the others attacks from this signature.

Can i do this?



Regards,

Pedro Tedeschi