mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 17:22:49 +01:00
exclude detect-parse errors
This commit is contained in:
@@ -202,6 +202,7 @@ if [[ $EXCLUDE_KNOWN_ERRORS == 'Y' ]]; then
|
||||
EXCLUDED_ERRORS="$EXCLUDED_ERRORS|parsing_exception" # Elastalert EQL parsing issue. Temp.
|
||||
EXCLUDED_ERRORS="$EXCLUDED_ERRORS|context deadline exceeded"
|
||||
EXCLUDED_ERRORS="$EXCLUDED_ERRORS|Error running query:" # Specific issues with detection rules
|
||||
EXCLUDED_ERRORS="$EXCLUDED_ERRORS|detect-parse" # Suricata encountering a malformed rule
|
||||
fi
|
||||
|
||||
RESULT=0
|
||||
|
||||
@@ -12,7 +12,7 @@ suricata:
|
||||
title: SIDS
|
||||
helpLink: suricata.html
|
||||
readonlyUi: True
|
||||
advanced: true
|
||||
advanced: True
|
||||
classification:
|
||||
classification__config:
|
||||
description: Classifications config file.
|
||||
|
||||
Reference in New Issue
Block a user