CSEC_PUBLIC/securityonion
1
0 Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-11-15 17:04:11 +01:00
Code Issues Packages Projects Releases Wiki Activity

add local.rules and filter.rules to suricata defaults. add extraction.rules, local.rules and filter.rules for suricata metadata

Browse Source
This commit is contained in:
m0duspwnens committed 2023-08-08 13:50:19 -04:00
1 parent dad541423d
commit b2e75e77e8
2 files changed
+8 -1
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

salt/suricata/defaults.yaml
+2 -1
View File
@@ -416,7 +416,6 @@ suricata:
enabled: "yes" enabled: "yes"
filename: keyword_perf.log filename: keyword_perf.log
append: "yes" append: "yes"
prefilter: prefilter:
enabled: "yes" enabled: "yes"
filename: prefilter_perf.log filename: prefilter_perf.log
@@ -443,6 +442,8 @@ suricata:
default-rule-path: /etc/suricata/rules default-rule-path: /etc/suricata/rules
rule-files: rule-files:
- all.rules - all.rules
- local.rules
- filter.rules
classification-file: /etc/suricata/classification.config classification-file: /etc/suricata/classification.config
reference-config-file: /etc/suricata/reference.config reference-config-file: /etc/suricata/reference.config
threshold-file: /etc/suricata/threshold.conf threshold-file: /etc/suricata/threshold.conf
salt/suricata/suricata_mdengine.yaml
+6
View File
@@ -70,3 +70,9 @@ suricata:
- flow - flow
#- netflow #- netflow
#- metadata #- metadata
profiling:
rule-files:
- all.rules
- extraction.rules
- local.rules
- filter.rules