I want to know where to see the effect of this tagged packets setting. I checked the alert event in eve.json, but I didn’t see the fields related to this setting.
Do you have rules that use the tag keyword? Otherwise you won’t see anything related to that.