Do we have any command to list out the high-performance snort rules the way we have for low performance? Also commands for what all protocols are consuming the high performance.
... View more
I do not see any whitelisting or suppression option in File events (Analysis-Files-File events) How do I suppress the events under File events?
... View more
The security intelligence event which are ingested in Splunk through eStreamer only has rec_type=280 and 281 (src/dest) records but they do not have action detail going through estreamer, are those details are being fed through syslog? What all other important logs we can send through syslog?
... View more
