You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Similar to #48, we need to support local pickup and processing of DNS events from Suricata eve.json. The schema is described here and we should look for "type": "query" events and then pull timestamp, source (IP), rrname, and rrtype values to send to the API for scoring.
The text was updated successfully, but these errors were encountered:
Similar to #48, we need to support local pickup and processing of DNS events from Suricata
eve.json
. The schema is described here and we should look for"type": "query"
events and then pulltimestamp
,source
(IP),rrname
, andrrtype
values to send to the API for scoring.The text was updated successfully, but these errors were encountered: