Bug #2465: Eve Stats will not be reported unless stats.log is enabled - Suricata - Open Information Security Foundation

Actions

#1

Updated by Danny Browning almost 7 years ago

This might just be a documentation thing that using stats type for eve requires enabled. It looks like if filename is not set, no file is written is disk.

Actions

Copy link

#2

Updated by Andreas Herz almost 7 years ago

Assignee set to OISF Dev
Target version set to TBD

Actions

Copy link

#3

Updated by Andreas Herz almost 6 years ago

I guess we still want to have the option to disable stats.log and just use the stats within EVE?!

Actions

Copy link

#4

Updated by Danny Browning almost 6 years ago

Yeah, it's more of a documentation thing, since you can't just use the stats in eve by adding `- stats`, you also have to have stats enabled. If you don't want stats on disk, you have to make sure no stats filename is specified.

Actions

Copy link

#5

Updated by Andreas Herz over 5 years ago

I think it's still confusing and documentation only helps a bit. Any thoughts on that from Victor?

Actions

Copy link

#6

Updated by Victor Julien over 5 years ago

I guess we could see if enabling stats in eve or as a separate log could automatically enable the global setting. It is a global thing because it is still usable over unix socket even if all outputs are disabled.

Actions

Copy link

#7