Any way to show reverse lookups in alerts Suricata??
-
Morning Bill. Is there any way to do a reverse lookup for the alerts in Suricata automatically??
So we dont have to click on every alert to see it.
-
No, that feature is not available. One problem with implementing it is literal horizontal space on the web page. There is a finite amount of "width" available. So some compromises are needed to fit everything within the table without resorting to scrolling horizontally forever to see something.
There has also not been a large demand for that feature. To the best of my recollection, you are the second user to ask about it in the history of the package.