Add Option for Ignoring Ranges of SIDs in Suricata Integrity Check

salt/soc/defaults.yaml

@@ -1435,6 +1435,8 @@ soc:
           rulesFingerprintFile: /opt/sensoroni/fingerprints/emerging-all.fingerprint
           stateFilePath: /opt/sensoroni/fingerprints/suricataengine.state
           integrityCheckFrequencySeconds: 1200
+          ignoredSidRanges:
+            - '1100000-1199999'
       client:
         enableReverseLookup: false
         docsUrl: /docs/

salt/soc/soc_soc.yaml

@@ -390,6 +390,11 @@ soc:
             advanced: True
             forcedType: "[]{}"
             helpLink: suricata.html
+          ignoredSidRanges:
+            description: 'List of Suricata SID ranges to ignore during the Integrity Check. This is useful for ignoring specific rules not governed by the UI.'
+            global: True
+            advanced: True
+            forcedType: "[]string"
       client:
         enableReverseLookup:
           description: Set to true to enable reverse DNS lookups for IP addresses in the SOC UI.