config: added ja3 to tls custom logging example

Signed-off-by: jason taylor <jtfas90@gmail.com>

diff --git a/suricata.yaml.in b/suricata.yaml.in
index c0811afd8ff37cd5eabe3d4c98b7a15e34810442..c882a8aa485b80c84f7ae25245f2e4386de1a7e3 100644 (file)
--- a/suricata.yaml.in
+++ b/suricata.yaml.in
@@ -176,7 +176,7 @@ outputs:
             #session-resumption: no
             # custom allows to control which tls fields that are included
             # in eve-log
-            #custom: [subject, issuer, session_resumed, serial, fingerprint, sni, version, not_before, not_after, certificate, chain]
+            #custom: [subject, issuer, session_resumed, serial, fingerprint, sni, version, not_before, not_after, certificate, chain, ja3]
         - files:
             force-magic: no   # force logging magic on all logged files
             # force logging of checksums, available hash functions are md5,