Re: Multiple subscriptions for data_log plugin
Russ <[email protected]>
| Newsgroups | gmane.comp.security.ids.snort.devel |
|---|---|
| Message-ID | <[email protected]> |
Not presently. You could patch it to support data_log = { keys = 'key1
key2 key3' } w/o much effort.
On 9/1/16 11:26 AM, Akhil Koul wrote:
> Hello
>
> I was wondering if there is a way to do multiple subscriptions
> ex.data_log = { key1 = ‘http_raw_uri’, key2= ‘http_methods' }
>
> or data_log = { key = ‘http_raw_uri, http_methods' }
>
> Thanks
> Akhil
>
>
>
> ------------------------------------------------------------------------------
>
>
> _______________________________________________
> Snort-devel mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/snort-devel
> Archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel
>
> Please visit http://blog.snort.org for the latest news about Snort!
------------------------------------------------------------------------------
_______________________________________________
Snort-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/snort-devel
Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel
Please visit http://blog.snort.org for the latest news about Snort!