Glossary: Logs and Data Sources for Investigations

sid (signature ID)

Also written: rule ID, signature_id

The ID number of an IDS rule, such as 9000003. It appears in each alert the rule raises.