yaml: add comment describing smtp extended

diff --git a/suricata.yaml.in b/suricata.yaml.in
index 07a7d7947bb18f8dfbff5576f5e4e7ee5bbfd625..bdc54279cdb26945ebf157b0750a5f0dd4a60cdc 100644 (file)
--- a/suricata.yaml.in
+++ b/suricata.yaml.in
@@ -140,7 +140,8 @@ outputs:
         #- drop:
         #    alerts: no       # log alerts that caused drops
         - smtp:
-            #extended: yes
+            #extended: yes # enable this for extended logging information
+            # this includes: message-id, subject, x_mailer, user-agent
             # custom fields logging from the list:
             #  reply-to, bcc, message-id, subject, x-mailer, user-agent, received,
             #  x-originating-ip, in-reply-to, references, importance, priority,