28 lines
		
	
	
		
			833 B
		
	
	
	
		
			Diff
		
	
	
	
	
	
			
		
		
	
	
			28 lines
		
	
	
		
			833 B
		
	
	
	
		
			Diff
		
	
	
	
	
	
--- a/suricata.yaml.in
 | 
						|
+++ b/suricata.yaml.in
 | 
						|
@@ -209,8 +209,9 @@
 | 
						|
             # https://suricata.readthedocs.io/en/latest/output/eve/eve-json-output.html#dns-v1-format
 | 
						|
 
 | 
						|
             # As of Suricata 5.0, version 2 of the eve dns output
 | 
						|
-            # format is the default.
 | 
						|
-            #version: 2
 | 
						|
+            # format is the default - but the daemon produces a warning to that effect
 | 
						|
+            # at start-up if this isn't explicitly set.
 | 
						|
+            version: 2
 | 
						|
 
 | 
						|
             # Enable/disable this logger. Default: enabled.
 | 
						|
             #enabled: yes
 | 
						|
@@ -988,9 +989,9 @@
 | 
						|
 ##
 | 
						|
 
 | 
						|
 # Run Suricata with a specific user-id and group-id:
 | 
						|
-#run-as:
 | 
						|
-#  user: suri
 | 
						|
-#  group: suri
 | 
						|
+run-as:
 | 
						|
+  user: suricata
 | 
						|
+  group: suricata
 | 
						|
 
 | 
						|
 # Some logging modules will use that name in event as identifier. The default
 | 
						|
 # value is the hostname
 |