# Applayer anomaly bug?

**URL:** <https://forum.suricata.io/t/applayer-anomaly-bug/422>\
**Category:** Help\
**Created:** [July 16, 2020, 7:26am UTC](https://forum.suricata.io/t/applayer-anomaly-bug/422 "2020-07-16T07:26:33Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Luke](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@Luke](https://forum.suricata.io/u/Luke)\
**Post date:** [July 16, 2020, 7:26am UTC](https://forum.suricata.io/t/applayer-anomaly-bug/422/1 "2020-07-16T07:26:33Z")

</div>

Hi all,

I encountered a problem generating application layer anomalies. When I have setup two eve-log ouputs, that only first of them obtain applayer anomalies.

Can anyone confirm this?

---

<div class="post-metadata">

**Author:** ![Jeff\_Lucovsky](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/jeff_lucovsky/32/11_2.png) [@Jeff\_Lucovsky](https://forum.suricata.io/u/Jeff_Lucovsky)\
**Post date:** [July 17, 2020, 12:24pm UTC](https://forum.suricata.io/t/applayer-anomaly-bug/422/2 "2020-07-17T12:24:39Z")

</div>

Hi Luke,

I can confirm that this is occurring.

Could you file a redmine ticket for this issue?
