Hi Arturo, >> BTW I have just finished a patch to Suricata that unifies this behaviour >> across event/alert and log output. I'll attach it in a comment to your >> bug #1938 in upstream's Redmine once it's tested and polished. > > I would like to see/test the patch before sending upstream.
Of course! I'd really appreciate to have you take a look. Will send it to you when it's ready. Thanks Sascha
