Include Notice Policy shortcuts in the Scripting User Manual.

Include two tests and baselines for the RST output.
This commit is contained in:
Scott Runnels 2013-04-28 15:48:44 -04:00
parent 59405af804
commit cb3e05edd4
5 changed files with 51 additions and 0 deletions

View file

@ -0,0 +1,11 @@
# @TEST-EXEC: bro %INPUT
# @TEST-EXEC: btest-diff .stdout
@load policy/protocols/ssh/interesting-hostnames.bro
@load base/protocols/ssh/
redef Notice::emailed_types += {
SSH::Interesting_Hostname_Login,
SSH::Login
};

View file

@ -0,0 +1,10 @@
# @TEST-EXEC: bro %INPUT
# @TEST-EXEC: btest-diff .stdout
@load policy/protocols/ssh/interesting-hostnames.bro
@load base/protocols/ssh/
redef Notice::type_suppression_intervals += {
[SSH::Interesting_Hostname_Login] = 1day,
[SSH::Login] = 12hrs,
};