zeek/testing/btest/Baseline/scripts.policy.frameworks.intel.seen.manage-event-groups.basic-smtp/manager..stdout
Arne Welzel e5367ba820 intel/seen/manage-event-groups: Policy script for toggling intel event groups
Co-authored-by: Mohan Dhawan <mohan@corelight.com>

(cherry picked from commit e90f947bee572189a82ed81f91c505d9db474588)
2025-05-16 12:02:51 +02:00

10 lines
422 B
Text

### BTest baseline data generated by btest-diff. Do not edit. Use "btest -U/-u" to update. Requires BTest >= 0.63.
running do_step(2)
Intel::indicator_inserted 1.2.3.4 Intel::ADDR
publish do_step(3) to zeek/cluster/worker
Intel::match_remote: 1.2.3.4 Intel::ADDR
Intel::match: 1.2.3.4 Intel::ADDR
running do_step(4)
Intel::indicator_removed 1.2.3.4 Intel::ADDR
publish do_step(5) to zeek/cluster/worker
running do_step(6)