Hi
Can I add pcap name or pcap folder path in eve.json
if I am running a pcap on suricata.
Yes – you can do this by setting pcap-file: true
This configuration setting is in the eve-log
section contained underneath outputs
Hi
Can I add pcap name or pcap folder path in eve.json
if I am running a pcap on suricata.
Yes – you can do this by setting pcap-file: true
This configuration setting is in the eve-log
section contained underneath outputs