CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-07 01:32:47 +01:00
Code Issues Packages Projects Releases Wiki Activity

add local.rules and filter.rules to suricata defaults. add extraction.rules, local.rules and filter.rules for suricata metadata

Browse Source
This commit is contained in:
m0duspwnens
2023-08-08 13:50:19 -04:00
parent dad541423d
commit b2e75e77e8
2 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
salt/suricata/defaults.yaml
View File

@@ -416,7 +416,6 @@ suricata:
enabled: "yes" enabled: "yes"
filename: keyword_perf.log filename: keyword_perf.log
append: "yes" append: "yes"
prefilter: prefilter:
enabled: "yes" enabled: "yes"
filename: prefilter_perf.log filename: prefilter_perf.log
@@ -443,6 +442,8 @@ suricata:
default-rule-path: /etc/suricata/rules default-rule-path: /etc/suricata/rules
rule-files: rule-files:
- all.rules - all.rules
- local.rules
- filter.rules
classification-file: /etc/suricata/classification.config classification-file: /etc/suricata/classification.config
reference-config-file: /etc/suricata/reference.config reference-config-file: /etc/suricata/reference.config
threshold-file: /etc/suricata/threshold.conf threshold-file: /etc/suricata/threshold.conf

6
salt/suricata/suricata_mdengine.yaml
View File

@@ -70,3 +70,9 @@ suricata:
- flow - flow
#- netflow #- netflow
#- metadata #- metadata
profiling:
rule-files:
- all.rules
- extraction.rules
- local.rules
- filter.rules