The .rev field contains additional information: user who created signature, and signature creation date, type and version. This is optional field which does not affect IDPS activity; it can be used to track changes.
The field has the following format:
.rev = <date>,<version>,<status>,<author>;
and parameters have the following data types:
-
<date>: integer;
-
<version>: integer;
-
<status>: string;
-
<author>: string.