# Intrusion Detection System log analysis with Suricata =\> Lab Section 4.Setup Question 4.4

**URL:** <https://discuss.elastic.co/t/intrusion-detection-system-log-analysis-with-suricata-lab-section-4-setup-question-4-4/369283>\
**Category:** Elastic Training\
**Created:** [October 23, 2024, 12:14pm UTC](https://discuss.elastic.co/t/intrusion-detection-system-log-analysis-with-suricata-lab-section-4-setup-question-4-4/369283 "2024-10-23T12:14:40Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![ulysse31](https://avatars.discourse-cdn.com/v4/letter/u/7ba0ec/32.png) [@ulysse31](https://discuss.elastic.co/u/ulysse31)\
**Post date:** [October 23, 2024, 12:14pm UTC](https://discuss.elastic.co/t/intrusion-detection-system-log-analysis-with-suricata-lab-section-4-setup-question-4-4/369283/1 "2024-10-23T12:14:40Z")

</div>

Course: Intrusion Detection System log analysis with Suricata  
Version: 4.Setup  
Question: 4.4 "How many total alerts were generated for the test signature?"

Hello,  
At that moment in the training, there is no test signature anywhere ! following the video we just ran suricata with particular arguments, but _no signature were used_ anywhere ...  
I thought "maybe its zero ?" =\> no  
I thought "maybe its the total number of packets ?" =\> no

I really do not understand this question at that moment on the training. May someone clarify this please ?

Thanks a lot

Regards,