Hi Team,
we are using suricata for IDS, as part of it we are sending tls packets to it, we would like to collect debug logs emitted by suricata and analyze it once.
Kindly let us know how we can get the debug logs from suricata daemon.
Thanks in Advance,
Kamal
Compile with --enable-debug then set SC_LOG_LEVEL=Debug as an env var. You can filter by using SC_LOG_OP_FILTER="stream|detect". The value here is treated as a pcre compatible regex.