From: Juliana Fajardini <jufajardini@oisf.net>
Date: Wed, 7 Jun 2023 19:13:24 +0000 (-0300)
Subject: doc: add missing rule to engine-analysis section
X-Git-Tag: suricata-7.0.0-rc2~53
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=f83c67bbb58d74fbe59a707ddc4558a20fbe213e;p=thirdparty%2Fsuricata.git

doc: add missing rule to engine-analysis section

The first report didn't have an example rule to go with.
---

diff --git a/doc/userguide/configuration/suricata-yaml.rst b/doc/userguide/configuration/suricata-yaml.rst
index e66b35cda8..c63f5c878d 100644
--- a/doc/userguide/configuration/suricata-yaml.rst
+++ b/doc/userguide/configuration/suricata-yaml.rst
@@ -2474,6 +2474,8 @@ Example:
   [10703] 26/11/2010 -- 11:41:15 - (detect.c:560) <Info> (SigLoadSignatures)
   -- Engine-Analysis for fast_pattern printed to file - /var/log/suricata/rules_fast_pattern.txt
 
+  alert tcp any any -> any any (content:"Volume Serial Number"; sid:1292;)
+
   == Sid: 1292 ==
   Fast pattern matcher: content
   Fast pattern set: no