Incidents: Difference between revisions

Incidents (view source)

8 bytes added , 11 November 2021

no edit summary

122

edits

@@ Line 115: / Line 115: @@
 |-
 |global_regex_match
-|This trigger allows to configure a list of regular expressions and is checked for every packet that matches one of the regular expressions on the list. As there are no attributes associated with this trigger this effectively means that any packet that matches one of the regular expressions will result in an incident. The incident will also contain information to which connection this packet belongs as well as which of the regular expressions was matched by the packet.
+|This trigger allows to configure a list of regular expressions and is checked for each packet whose L7 data matches one of the regular expressions in the list. Since there are no attributes associated with this trigger, this effectively means that any packet which matches one of the regular expressions will result in an incident. The incident also contains information about which connection this packet belongs to as well as which of the regular expressions matches the packet.
 |no attributes are available for this trigger
 |}