16.1. Lua usage in Suricata¶
Lua scripting can be used in two components of Suricata. The first is in output and the second one in rules in the detection engine.
Both features are using a list of functions to access the data extracted by Suricata. You can get the list of functions in the Lua functions page.
Currently, there is a difference in the
needs key in the
init function, depending on what is the usage:
detection. The list of available functions may also differ.