Splitting blacklisted flow alert and creating two new alerts. (#8354) (#8355)

* Splitting blacklisted flow alert and creating two new alerts. (#8354)

* Renaming to 'Blacklisted Client Contact' and 'Blacklisted Server Contact'. (#8354)
This commit is contained in:
Nicolò Maio 2024-04-24 17:37:30 +02:00 committed by GitHub
parent 636ba2975c
commit 59075f5e10
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
20 changed files with 739 additions and 29 deletions

View file

@ -15,11 +15,11 @@ local flow_alert_keys = {
flow_alert_dns_data_exfiltration = 6,
flow_alert_dns_invalid_query = 7,
flow_alert_elephant_flow = 8,
flow_alert_notused_1 = 9, -- No longer used, can be recycled
flow_alert_blacklisted_client_contact = 9,
flow_alert_external = 10,
flow_alert_longlived = 11,
flow_alert_low_goodput = 12,
flow_alert_notused_2 = 13, -- No longer used, can be recycled
flow_alert_blacklisted_server_contact = 13,
flow_alert_internals = 14,
flow_alert_notused_3 = 15, -- No longer used, can be recycled
flow_alert_remote_to_remote = 16,