From 8d47c13d2a7d3f6d1d26062132a43ad650a201e7 Mon Sep 17 00:00:00 2001 From: Jason Ish Date: Thu, 4 Feb 2016 10:18:20 -0600 Subject: [PATCH] doc: new global threshold examples from Peter Manev. --- doc/sphinx/configuration/global-thresholds.rst | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/doc/sphinx/configuration/global-thresholds.rst b/doc/sphinx/configuration/global-thresholds.rst index 183e2c4cdd..a5acbe4068 100644 --- a/doc/sphinx/configuration/global-thresholds.rst +++ b/doc/sphinx/configuration/global-thresholds.rst @@ -37,7 +37,7 @@ Syntax: suppress gen_id , sig_id suppress gen_id , sig_id , track , ip -Example: +Examples: :: @@ -46,6 +46,12 @@ Example: This will make sure the signature 2002087 will never match for src host 209.132.180.67. +Other possibilities/examples:: + + suppress gen_id 1, sig_id 2003614, track by_src, ip 217.110.97.128/25 + suppress gen_id 1, sig_id 2003614, track by_src, ip [192.168.0.0/16,10.0.0.0/8,172.16.0.0/12] + suppress gen_id 1, sig_id 2003614, track by_src, ip $HOME_NET + .. _global-thresholds-vs-rule-thresholds: Global thresholds vs rule thresholds