# Managed Suricata threshold/suppression configuration.
#
# Keep this file environment-specific. Examples:
#
# Suppress one known false-positive SID completely:
# suppress gen_id 1, sig_id 1234567
#
# Suppress a SID only for a trusted host/network:
# suppress gen_id 1, sig_id 1234567, track by_src, ip 192.168.100.10
#
# Limit a noisy SID to one alert per source every 5 minutes:
# threshold gen_id 1, sig_id 1234567, type limit, track by_src, count 1, seconds 300