Using more search-friendly stats counters for exception_policy counters.
Related to
Task #7185
count: 1
match:
event_type: stats
- stats.app_layer.error.exception_policy.drop_flow: 1
- stats.app_layer.error.exception_policy.pass_flow: 0
+ stats.exception_policy.app_layer.error.drop_flow: 1
+ stats.exception_policy.app_layer.error.pass_flow: 0
- filter:
min-version: 8
count: 1
count: 1
match:
event_type: stats
- stats.app_layer.error.exception_policy.pass_packet: 1
- stats.app_layer.error.exception_policy.drop_packet: 0
+ stats.exception_policy.app_layer.error.pass_packet: 1
+ stats.exception_policy.app_layer.error.drop_packet: 0
- filter:
min-version: 8
count: 1
count: 1
match:
event_type: stats
- stats.defrag.memcap_exception_policy.drop_packet: 1
- stats.defrag.memcap_exception_policy.pass_packet: 0
+ stats.exception_policy.defrag.memcap.drop_packet: 1
+ stats.exception_policy.defrag.memcap.pass_packet: 0
- drop:
alerts: yes
flows: all
+ - stats:
+ null-values: false
+
+ - stats:
+ enabled: yes
+ filename: stats.log
+ append: yes
event_type: flow
flow.exception_policy[0].target: "stream_midstream"
flow.exception_policy[0].policy: "drop_flow"
+ - filter:
+ min-version: 8
+ count: 1
+ match:
+ event_type: stats
+ stats.exception_policy.tcp.midstream.drop_flow: 1
count: 1
match:
event_type: stats
- stats.tcp.midstream_exception_policy.pass_flow: 9
+ stats.exception_policy.tcp.midstream.pass_flow: 9
- filter:
min-version: 8
count: 1
count: 1
match:
event_type: stats
- stats.tcp.midstream_exception_policy.drop_flow: 1
+ stats.exception_policy.tcp.midstream.drop_flow: 1
- filter:
min-version: 8
count: 1
count: 1
match:
event_type: stats
- stats.tcp.midstream_exception_policy.pass_flow: 2
+ stats.exception_policy.tcp.midstream.pass_flow: 2
- filter:
min-version: 8
count: 1
count: 1
match:
event_type: stats
- stats.tcp.midstream_exception_policy.bypass: 1
+ stats.exception_policy.tcp.midstream.bypass: 1
- filter:
min-version: 8
count: 1
count: 1
match:
event_type: stats
- stats.tcp.midstream_exception_policy.drop_flow: 1
+ stats.exception_policy.tcp.midstream.drop_flow: 1
- filter:
min-version: 8
count: 1
count: 1
match:
event_type: stats
- stats.flow.memcap_exception_policy.drop_packet: 1
- stats.flow.memcap_exception_policy.pass_packet: 0
+ stats.exception_policy.flow.memcap.drop_packet: 1
+ stats.exception_policy.flow.memcap.pass_packet: 0
- filter:
min-version: 8
count: 1
count: 1
match:
event_type: stats
- stats.tcp.reassembly_exception_policy.pass_packet: 1
+ stats.exception_policy.tcp.reassembly.pass_packet: 1
- filter:
min-version: 8
count: 1
count: 1
match:
event_type: stats
- stats.tcp.ssn_memcap_exception_policy.drop_flow: 1
+ stats.exception_policy.tcp.ssn_memcap.drop_flow: 1
- filter:
min-version: 8
count: 1