From: Eric Leblond <eric@regit.org>
Date: Thu, 22 Jun 2017 07:15:00 +0000 (+0200)
Subject: doc: add app_proto to alert event
X-Git-Tag: suricata-4.0.0-rc1~21
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=ef88689f1e82d3ae6ce41efa047dd82496ee055d;p=thirdparty%2Fsuricata.git

doc: add app_proto to alert event
---

diff --git a/doc/userguide/output/eve/eve-json-format.rst b/doc/userguide/output/eve/eve-json-format.rst
index bf69ad087f..5a904f43b1 100644
--- a/doc/userguide/output/eve/eve-json-format.rst
+++ b/doc/userguide/output/eve/eve-json-format.rst
@@ -74,6 +74,7 @@ the signature.
      "gid": 1,
      "signature_id": 1,
      "rev": 1,
+     "app_proto": "http",
      "signature": "HTTP body talking about corruption",
      "severity": 3,
      "source": {