diff --git a/suricata.yaml.in b/suricata.yaml.in index 0ea4cdec7d..e521ca5b79 100644 --- a/suricata.yaml.in +++ b/suricata.yaml.in @@ -85,8 +85,8 @@ outputs: enabled: @e_enable_evelog@ filetype: regular #regular|syslog|unix_dgram|unix_stream|redis filename: eve.json - # Enable for multi-threaded eve.json output; output files are suffixed - # with an identifier, e.g., eve.json.9. + # Enable for multi-threaded eve.json output; output files are amended with + # with an identifier, e.g., eve.9.json #threaded: false #prefix: "@cee: " # prefix to prepend to each log entry # the following are valid when type: syslog above