Custom Suricata Rules

Hello knightian,

you simple can put your custom suricata rules into the following file:

/var/lib/suricata/local.rules

If this file does not exist, just create it and put your rules into it.

In the WUI on the IDS page the “local.rules” will be displayed and can be enabled like the usual way.

Best regards,

-Stefan