output log_null # like using snort -n ruletype info { type alert output alert_fast: info.alert output log_null }