Hello,
I've just setup my ids as pictured in opensense_config.jpg.
I've started to disable some rules as pictures in opnsense_disabled_rules.jpg
Sadly the disabled rules keep poping up into the alert viewer. And even clicking on the "pen" icon it is seen as disabled but still detected :/
(see opnsense_disable_rules_visibles.jpg)
Do I miss someting?
Ok looks like the alerts do not popup anymore (I've restarted the service ini the meantime).
Perhaps related.