From b763c7ec1163e6026c4c3000e4258c991cb59a62 Mon Sep 17 00:00:00 2001 From: Eric Leblond Date: Wed, 28 Jun 2017 13:56:43 +0200 Subject: [PATCH] doc: document http-body logging --- doc/userguide/output/eve/eve-json-output.rst | 2 ++ 1 file changed, 2 insertions(+) diff --git a/doc/userguide/output/eve/eve-json-output.rst b/doc/userguide/output/eve/eve-json-output.rst index c39432b272..8dce34994f 100644 --- a/doc/userguide/output/eve/eve-json-output.rst +++ b/doc/userguide/output/eve/eve-json-output.rst @@ -163,6 +163,8 @@ Metadata:: # payload-buffer-size: 4kb # max size of payload buffer to output in eve-log # payload-printable: yes # enable dumping payload in printable (lossy) format # packet: yes # enable dumping of packet (without stream segments) + # http-body: yes # enable dumping of http body in Base64 + # http-body-printable: yes # enable dumping of http body in printable format metadata: yes # add L7/applayer fields, flowbit and other vars to the alert Alternatively to the `metadata` key it is also possible to select the application -- 2.47.2