doc: add missing rule to engine-analysis section

The first report didn't have an example rule to go with.
2 years ago · f83c67bbb5
parent 6dc486af50
commit f83c67bbb5
1 changed files with 2 additions and 0 deletions
--- a/doc/userguide/configuration/suricata-yaml.rst
+++ b/doc/userguide/configuration/suricata-yaml.rst
@ -2474,6 +2474,8 @@ Example:
  [10703] 26/11/2010 -- 11:41:15 - (detect.c:560) <Info> (SigLoadSignatures)
  -- Engine-Analysis for fast_pattern printed to file - /var/log/suricata/rules_fast_pattern.txt

+  alert tcp any any -> any any (content:"Volume Serial Number"; sid:1292;)
+
  == Sid: 1292 ==
  Fast pattern matcher: content
  Fast pattern set: no