diff --git a/salt/suricata/soc_suricata.yaml b/salt/suricata/soc_suricata.yaml index 34c9b6269..806033483 100644 --- a/salt/suricata/soc_suricata.yaml +++ b/salt/suricata/soc_suricata.yaml @@ -25,7 +25,7 @@ suricata: advanced: True helpLink: suricata.html maxsize: - description: Maximum disk usage in GB for all PCAP written by Suricata. + description: Maximum size in GB for total disk usage of all PCAP written by Suricata. helpLink: suricata.html compression: description: Enable compression of Suricata PCAP. @@ -36,7 +36,7 @@ suricata: advanced: True helpLink: suricata.html lz4-level: - description: lz4 compression level of PCAP. 0 for no compression. 16 for maximum compression. + description: lz4 compression level of PCAP. Set to 0 for no compression. Set to 16 for maximum compression. advanced: True helpLink: suricata.html filename: @@ -50,7 +50,7 @@ suricata: readonly: True helpLink: suricata.html use-stream-depth: - description: Set to "no" to ignore the stream depth and capture the entire flow. Set to "yes" to truncate the flow based on the stream depth. + description: Set to "no" to ignore the stream depth and capture the entire flow. Set to "yes" to truncate the flow based on the stream depth. advanced: True regex: ^(yes|no)$ regexFailureMessage: You must enter either yes or no.