Issues

• Error with variables for alert_time keyword

  beave/sagan#171 · Filter by author Vernaculus opened on Apr 19, 2022
  1

• THIS REPO HAS MOVED TO https://github.com/quadrantsec/sagan !

  beave/sagan#170 · Filter by author beave opened on Jan 7, 2021

• Document purpose of "hostname" field

  beave/sagan#147 · Filter by author candlerb opened on Oct 29, 2019
  1

• Documentation/purpose of "date" and "time" fields

  beave/sagan#144 · Filter by author candlerb opened on Oct 29, 2019

• Output Options / FIFO

  beave/sagan#129 · Filter by author SpudDogg opened on Aug 13, 2019
  5

• Sagan - stats issue.

  beave/sagan#127 · Filter by author beave opened on Jul 10, 2019

• Write "stats" out to json

  beave/sagan#126 · Filter by author beave opened on Mar 20, 2019

• Sagan faults with large input and certain pcre rules.

  beave/sagan#122 · Filter by author beave opened on Aug 21, 2018

• Alert on rulesets that don't match source logs or have 0 hits after X time.

  beave/sagan#117 · Filter by author Brian-Echeverry opened on Jun 6, 2018

• Client tracking via a specified list

  beave/sagan#116 · Filter by author beave opened on Jun 5, 2018

• xbit to track usernames.

  beave/sagan#115 · Filter by author beave opened on May 25, 2018
  1

• With Bluedot disabled, you can still load bluedot rules

  beave/sagan#112 · Filter by author beave opened on May 18, 2018
  1

• Feature request - use temporal values if found in lognorm fields.

  beave/sagan#108 · Filter by author CyberTaoFlow opened on Dec 8, 2017

• Not receiving logs alerts not resolving hostnames

  beave/sagan#105 · Filter by author srawls1740 opened on Dec 5, 2017

• Partial string matching with brointel

  beave/sagan#99 · Filter by author CyberTaoFlow opened on Aug 30, 2017

• Error refers to the wrong YAML

  beave/sagan#98 · Filter by author jeremygrove84 opened on Aug 15, 2017

• Flowbits unreliable across threads

  beave/sagan#71 · Filter by author kshelton opened on Jun 23, 2016
  8

• Match content on normalized fields

  beave/sagan#53 · Filter by author jonschipp opened on Jul 1, 2015
  12

• sagan-config.c / sagan-rules.c 'var' detection.

  beave/sagan#39 · Filter by author beave opened on Aug 20, 2014