Re: [PATCH] suricata: Enable EVE logging

[Michael Tremer <michael.tremer@ipfire.org>]

[-- Attachment #1: Type: text/plain, Size: 1268 bytes --]

Hi Erik,

I believe that Stefan has already enabled this in this commit:

  https://git.ipfire.org/?p=ipfire-2.x.git;a=commitdiff;h=616395f37c6d096607283cc17e5554cc03e9bcc6

Are you saying that the library wasn’t linked before?

I am not sure what this patch is meant to achieve - assuming that Stefan’s change isn’t broken.

-Michael

> On 4 Jun 2019, at 14:00, Erik Kapfer <ummeegge(a)ipfire.org> wrote:
> 
> The EVE output facility outputs alerts, metadata, file info and protocol specific records through JSON.
> for further informations please see --> https://suricata.readthedocs.io/en/suricata-4.1.2/output/eve/index.html .
> 
> Signed-off-by: Erik Kapfer <ummeegge(a)ipfire.org>
> ---
> lfs/suricata | 2 ++
> 1 file changed, 2 insertions(+)
> 
> diff --git a/lfs/suricata b/lfs/suricata
> index 310920606..6f779d875 100644
> --- a/lfs/suricata
> +++ b/lfs/suricata
> @@ -80,6 +80,8 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
> 		--enable-nfqueue \
> 		--disable-static \
> 		--disable-python \
> +		--with-libjansson-libraries=/usr/lib \
> +		--with-libjansson-includes=/usr/include \
> 		--disable-suricata-update
> 	cd $(DIR_APP) && make $(MAKETUNING)
> 	cd $(DIR_APP) && make install
> -- 
> 2.12.2
>