yaml: add comment describing smtp extended

10 years ago · 8fd88f543d
parent f81f353d1f
commit 8fd88f543d
1 changed files with 2 additions and 1 deletions
--- a/suricata.yaml.in
+++ b/suricata.yaml.in
@ -140,7 +140,8 @@ outputs:
        #- drop:
        #    alerts: no       # log alerts that caused drops
        - smtp:
-            #extended: yes
+            #extended: yes # enable this for extended logging information
+            # this includes: message-id, subject, x_mailer, user-agent
            # custom fields logging from the list:
            #  reply-to, bcc, message-id, subject, x-mailer, user-agent, received,
            #  x-originating-ip, in-reply-to, references, importance, priority,