requires: check stat; unknown requires keyword

diff --git a/tests/requires/test.rules b/tests/requires/test.rules
index eaa41a4123df075ac374e8cfd4a53f863f7855bf..2d24c964f923a3200e7f273f7ca0356b4814c86c 100644 (file)
--- a/tests/requires/test.rules
+++ b/tests/requires/test.rules
@@ -13,3 +13,5 @@ alert vxlan any any -> any any (requires: version >= 10; sid:1;)
 alert udp any any -> any any (vxlan_vni:10; requires: version >= 10; sid:2;)
 alert http any any => any any (requires: version >= 10; sid:3;)
 alert tcp any any -> any any (frame:smtp.not_supported; requires: version >= 10; sid:4;)
+
+alert asdf any any -> any any (requires: version >= 6, foo bar; sid:102; rev:1;)

diff --git a/tests/requires/test.yaml b/tests/requires/test.yaml
index 63ac64c084c51c973d919e873df7457cef33c877..72f7e67b6cfe5863ba3e84e56d2f63810f57adcc 100644 (file)
--- a/tests/requires/test.yaml
+++ b/tests/requires/test.yaml
@@ -42,3 +42,9 @@ checks:
       count: 0
       match:
         alert.signature_id: 9
+
+  - filter:
+      count: 1
+      match:
+        event_type: stats
+        stats.detect.engines[0].rules_skipped: 7