change notice$note to match signature

Zeek
1

Hi
all the signature notice$note comes out with Signatures::Sensitive_Signature
I want to change the notice$note to signature ID or custom name

I try to do this by signature_match
but this is not working

if I use testsig.sig in the local.bro, notice comes out find.

do I have to approach from different way?

2

I understand what you want to happen, but I don't really understand how you're trying to approach it. Your code doesn't even look like it's valid syntax (the log_signature part).

  .Seth