Differences

This shows you the differences between two versions of the page.

--- tips:suricata-eve-unixsocket [2020/08/27 19:10] – [6. Updating with latest rules] navaneeth
+++ tips:suricata-eve-unixsocket [2020/09/10 16:28] – [2. Installing Suricata version 5.0] veera
@@ Line 20: / Line 20: @@
 apt-get install suricata
 </code>
+===== Updating with latest ruleset =====
+Use the following command to update the latest emerging-threats ruleset
+<code>sudo suricata-update</code>
+suricata-update puts the combined rules in ''/var/lib/suricata/rules'' which is owned by root. Make sure the trisul user can read this directory.
+<code>sudo chown trisul.trisul /var/lib/suricata -R </code>
 ==== 3. Installing Emerging Threat Rules 5.0 ====
@@ Line 60: / Line 77: @@
 {{:app:how_to_start_suricata.png?600|}}
-==== 7. Viewing Alerts ====
+==== 6. Viewing Alerts ====
 {{:tips:suricata-alert.png?600|}}
-==== 7. Updating with latest ruleset ====
-If you have already installed suricata and you want to update with the latest rules. Use the following command.
-<code>sudo suricata-update</code>