Skip to content

Commit

Permalink
userguide/exceptions: clarify when stats are logged
Browse files Browse the repository at this point in the history
The stats for exception policies are only logged/ present when any of
the exception policies are enabled (which means any value other than
"auto" or "ignore" in IDS mode, or "ignore" in IPS mode).

This wasn't clearly stated in the docs.
  • Loading branch information
jufajardini committed Feb 26, 2025
1 parent 1f13c43 commit 6ff5138
Showing 1 changed file with 3 additions and 2 deletions.
5 changes: 3 additions & 2 deletions doc/userguide/configuration/exception-policies.rst
Original file line number Diff line number Diff line change
Expand Up @@ -260,7 +260,8 @@ applying the configured behavior for such scenario: *to pass the flow* (``pass_f
Available Stats
~~~~~~~~~~~~~~~

There are stats counters for each supported exception policy scenario:
There are stats counters for each supported exception policy scenario that will
be logged when exception policies are enabled:

.. list-table:: **Exception Policy Stats Counters**
:widths: 50 50
Expand Down Expand Up @@ -289,7 +290,7 @@ Stats for application layer errors are available in summarized form or per
application layer protocol. As the latter is extremely verbose, by default
Suricata logs only the summary. If any further investigation is needed, it
is recommended to enable per-app-proto exception policy error counters
temporarily (for :ref:`stats configuration<suricata_yaml_outputs>`).
temporarily (for more, read :ref:`stats configuration<suricata_yaml_outputs>`).


Command-line Options for Simulating Exceptions
Expand Down

0 comments on commit 6ff5138

Please sign in to comment.