From: Alice Akaki Date: Tue, 18 Feb 2025 23:56:43 +0000 (-0400) Subject: doc: replace 'eve' with 'EVE' in the LDAP keywords documentation X-Git-Tag: suricata-8.0.0-beta1~389 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=31ee18b5bebee36b5d12f46077ce6bd1405d1c44;p=thirdparty%2Fsuricata.git doc: replace 'eve' with 'EVE' in the LDAP keywords documentation --- diff --git a/doc/userguide/rules/ldap-keywords.rst b/doc/userguide/rules/ldap-keywords.rst index d3ea306c08..60c01af726 100644 --- a/doc/userguide/rules/ldap-keywords.rst +++ b/doc/userguide/rules/ldap-keywords.rst @@ -52,7 +52,7 @@ Syntax:: ldap.request.operation uses :ref:`unsigned 8-bit integer `. -This keyword maps to the eve field ``ldap.request.operation`` +This keyword maps to the EVE field ``ldap.request.operation`` Examples ^^^^^^^^ @@ -79,7 +79,7 @@ Syntax:: ldap.responses.operation uses :ref:`unsigned 8-bit integer `. -This keyword maps to the eve field ``ldap.responses[].operation`` +This keyword maps to the EVE field ``ldap.responses[].operation`` An LDAP request operation can receive multiple responses. By default, the ldap.responses.operation keyword matches all indices, but it is possible to specify a particular index for matching @@ -147,7 +147,7 @@ It can be matched exactly, or compared using the ``op`` setting:: ldap.responses.count uses :ref:`unsigned 32-bit integer `. -This keyword maps to the eve field ``len(ldap.responses[])`` +This keyword maps to the EVE field ``len(ldap.responses[])`` Examples ^^^^^^^^