Snort mailing list archives
Re: Multiple subscriptions for data_log plugin
From: Russ <rucombs () cisco com>
Date: Fri, 2 Sep 2016 09:57:41 -0400
Not presently. You could patch it to support data_log = { keys = 'key1 key2 key3' } w/o much effort.
On 9/1/16 11:26 AM, Akhil Koul wrote:
HelloI was wondering if there is a way to do multiple subscriptions ex.data_log = { key1 = ‘http_raw_uri’, key2= ‘http_methods' }or data_log = { key = ‘http_raw_uri, http_methods' } Thanks Akhil ------------------------------------------------------------------------------ _______________________________________________ Snort-devel mailing list Snort-devel () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-devel Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel Please visit http://blog.snort.org for the latest news about Snort!
------------------------------------------------------------------------------
_______________________________________________ Snort-devel mailing list Snort-devel () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-devel Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel Please visit http://blog.snort.org for the latest news about Snort!
Current thread:
- Multiple subscriptions for data_log plugin Akhil Koul (Sep 01)
- Re: Multiple subscriptions for data_log plugin Russ (Sep 02)