#[0] hey I noticed on the snort search integration if there are no results found for the search it keeps trying with different since/until filters every second. Very spammy on the relay side as search REQs are much more expensive than others. Anything we can do about this to reduce the number of requests?
I may have to add search specific rate limiting but would prefer to wait on that for now.