• Support
  • Forums
  • Blogs

remove signatures


Entry Level
I want to remove Host operating system change and Host Service Change from showing up as alarms.  I have gone into Configuration - Threat Intelligence - Data Source - Data Source ID 5004 - Event Type ID and changed the priority and reliability from 1s to 0s but it is still firing the alarms.  Am I doing it correctly or am I going to need into the snort.cfg file through ssh?

Share post:

This discussion has been closed.