Actions
Feature #2509
openAdd support to have more than one condition to match a rule
Effort:
low
Difficulty:
medium
Label:
Description
Sometime you want to disable or enable a rule if it matches a regex AND is from a specific file or group. One way to archive this behavior is the support of specify more than one matcher per line in {enable,disable}.conf.
A config line could start with "multi:" followed by semicolon separated list of sub-matchers
Updated by Julian Wecke over 6 years ago
pull request #37
https://github.com/OISF/suricata-update/pull/37
Updated by Jason Ish almost 6 years ago
- Target version set to TBD
Setting target version to "Soon" for consideration after v1.0.
Updated by Shivani Bhardwaj over 5 years ago
- Status changed from New to Feedback
Actions