Files
securityonion/salt/idstools/etc/disable.conf
Mike Reeves 1d24d7bc7f Misc pillars
2020-07-17 17:38:10 -04:00

15 lines
396 B
Plaintext

{%- set disabled_sids = salt['pillar.get']('idstools:sids:disabled', {}) -%}
# idstools - disable.conf
# Example of disabling a rule by signature ID (gid is optional).
# 1:2019401
# 2019401
# Example of disabling a rule by regular expression.
# - All regular expression matches are case insensitive.
# re:hearbleed
# re:MS(0[7-9]|10)-\d+
{%- for sid in disabled_sids %}
{{ sid }}
{%- endfor %}