Parsing Suricata from OpnSense

Hey @accidentaladmin

Oh your all good, I think you have double configurations under the “when” statement.

Here is a better reference, shoothub was pretty good at pipes. I basically get by,Im by no means really good at pipes but I have a library full if need be.

TBH, there is alot of examples in the forum over the years, not sure is you executed a global search here.