suppress message with idmef-criteria-filter

Hello,

As documentation says, it's possible to suppress alarms to be logged into
prelude system.
My question is:
What is the best way to suppress a specific alarm (with a specific string)
to not be show on prewikka (web interface).

The documentation show a example that can help, but it isn't exact what I
want:

prelude-manager.conf
------------------------------------------------
[TextMod]

logfile = /var/log/prelude.log
------------------------------------------------
[thresholding=sudotest]
path = alert.classification.text, alert.target(0).node.address(0).address
threshold = 1
seconds = 3600
limit= 3600
hook = TextMod
------------------------------------------------
[idmef-criteria-filter=sudotest]
rule = alert.classification.text =~ 'Test Alarm'
hook = thresholding[sudotest]
------------------------------------------------

Any suggestions ?
_______________________________________________
Prelude-user site list
[email protected]
http://lists.prelude-ids.org/mailman/listinfo/prelude-user