From a1a22cccd27cb215b60a49bd9a02cf588e35817c Mon Sep 17 00:00:00 2001 From: Eric Leblond Date: Mon, 18 Jan 2021 23:41:55 +0100 Subject: [PATCH] doc: document dataset-lookup Ticket: #5184 --- doc/userguide/rules/datasets.rst | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) diff --git a/doc/userguide/rules/datasets.rst b/doc/userguide/rules/datasets.rst index 232b59c698..6065e1a2bd 100644 --- a/doc/userguide/rules/datasets.rst +++ b/doc/userguide/rules/datasets.rst @@ -184,6 +184,26 @@ set name type Data type: string, md5, sha256 +dataset-lookup +~~~~~~~~~~~~~~ + +Unix Socket command to test if data is in a set. + +Syntax:: + + dataset-lookup + +set name + Name of an already defined dataset +type + Data type: string, md5, sha256 +data + Data to test in serialized form (base64 for string, hex notation for md5/sha256) + +Example testing if 'google.com' is in the set 'myset':: + + dataset-lookup myset string Z29vZ2xlLmNvbQ== + dataset-dump ~~~~~~~~~~~~ -- 2.47.2