next up previous contents
Next: Event Queue Configuration Options Up: Event Processing Previous: Examples   Contents


Event Logging

Snort supports logging multiple events per packet/stream that are prioritized with different insertion methods, such as max content length or event ordering using the event queue.

The general configuration of the event queue is as follows:

    config event_queue: [max_queue [size]] [log [size]] [order_events [TYPE]]



Subsections

Eugene Misnik 2013-05-08