From 0e9f42c744b2c849fef4dc6c34f5d18d4fb80aa3 Mon Sep 17 00:00:00 2001
From: Shivani Bhardwaj <shivanib134@gmail.com>
Date: Fri, 28 Jan 2022 17:43:10 +0530
Subject: [PATCH] doc/xbits: clarify noalert usage

---
 doc/userguide/rules/xbits.rst | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/doc/userguide/rules/xbits.rst b/doc/userguide/rules/xbits.rst
index ca48874f9f..9977feb309 100644
--- a/doc/userguide/rules/xbits.rst
+++ b/doc/userguide/rules/xbits.rst
@@ -8,8 +8,7 @@ Syntax::
     xbits:<set|unset|isset|isnotset|toggle>,<name>,track <ip_src|ip_dst|ip_pair>;
     xbits:<set|unset|isset|toggle>,<name>,track <ip_src|ip_dst|ip_pair> \
         [,expire <seconds>];
-    xbits:<set|unset|isset|toggle>,<name>,track <ip_src|ip_dst|ip_pair> \
-        [,expire <seconds>];
+    xbits:nolert;
 
 Notes
 ~~~~~
@@ -21,7 +20,7 @@ Notes
    ``track ip_dst``, if you want to match on the server response,
    you check it (``isset``) with ``track ip_src``.
 
--  To not alert, use ``noalert;``
+-  To not alert, use ``noalert`` as a standalone option to ``xbits`` just like flowbits.
 
 - the ``toggle`` option will flip the value of the xbits.
 
-- 
2.47.2