mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 09:12:45 +01:00
16 lines
440 B
Plaintext
16 lines
440 B
Plaintext
{%- set disabled_sids = salt['pillar.get']('idstools:sids:disabled', {}) -%}
|
|
# idstools - disable.conf
|
|
|
|
# Example of disabling a rule by signature ID (gid is optional).
|
|
# 1:2019401
|
|
# 2019401
|
|
|
|
# Example of disabling a rule by regular expression.
|
|
# - All regular expression matches are case insensitive.
|
|
# re:hearbleed
|
|
# re:MS(0[7-9]|10)-\d+
|
|
{%- if disabled_sids != None %}
|
|
{%- for sid in disabled_sids %}
|
|
{{ sid }}
|
|
{%- endfor %}
|
|
{%- endif %} |