email-json: add bcc to extended fields

diff --git a/src/output-json-email-common.c b/src/output-json-email-common.c
index 30b8c62fa756495d85f096fd6a63cda275ba9214..b255a8e4933bc0a3befa0e1e136aabbfe4fa20d3 100644 (file)
--- a/src/output-json-email-common.c
+++ b/src/output-json-email-common.c
@@ -69,7 +69,7 @@ struct {
     uint32_t flags;
 } email_fields[] =  {
     { "reply_to", "reply-to", LOG_EMAIL_DEFAULT },
-    { "bcc", "bcc", LOG_EMAIL_COMMA },
+    { "bcc", "bcc", LOG_EMAIL_COMMA|LOG_EMAIL_EXTENDED },
     { "message_id", "message-id", LOG_EMAIL_EXTENDED },
     { "subject", "subject", LOG_EMAIL_EXTENDED },
     { "x_mailer", "x-mailer", LOG_EMAIL_EXTENDED },

diff --git a/suricata.yaml.in b/suricata.yaml.in
index bdc54279cdb26945ebf157b0750a5f0dd4a60cdc..7767620cda92fd42adb3a4a8351f28717e75b6d7 100644 (file)
--- a/suricata.yaml.in
+++ b/suricata.yaml.in
@@ -141,7 +141,7 @@ outputs:
         #    alerts: no       # log alerts that caused drops
         - smtp:
             #extended: yes # enable this for extended logging information
-            # this includes: message-id, subject, x_mailer, user-agent
+            # this includes: bcc, message-id, subject, x_mailer, user-agent
             # custom fields logging from the list:
             #  reply-to, bcc, message-id, subject, x-mailer, user-agent, received,
             #  x-originating-ip, in-reply-to, references, importance, priority,