13 lines
466 B
Plaintext
13 lines
466 B
Plaintext
# Managed Suricata threshold/suppression configuration.
|
|
#
|
|
# Keep this file environment-specific. Examples:
|
|
#
|
|
# Suppress one known false-positive SID completely:
|
|
# suppress gen_id 1, sig_id 1234567
|
|
#
|
|
# Suppress a SID only for a trusted host/network:
|
|
# suppress gen_id 1, sig_id 1234567, track by_src, ip 192.168.100.10
|
|
#
|
|
# Limit a noisy SID to one alert per source every 5 minutes:
|
|
# threshold gen_id 1, sig_id 1234567, type limit, track by_src, count 1, seconds 300
|