Project

General

Profile

Actions

Feature #4974

closed

Log references to Eve

Added by Jason Ish almost 3 years ago. Updated 3 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Effort:
Difficulty:
Label:

Description

Its been discussed a few time of references should be logged to eve. This would give alerts more context without access to the rule. However, logging the rule is also an option.

The reference logged should probably be the fully expanded reference.

Actions

Also available in: Atom PDF