16.1. Lua usage in Suricata¶
Lua scripting can be used in two components of Suricata. The first is in output and the second one in rules in the detection engine.
Both features are using a list of functions to access to data extracted by Suricata. You can get the list of functions in the Lua functions page.
16.1.1. Lua output¶
Lua can be used to write arbitrary output. See Lua Output for more information.
16.1.2. Lua detection¶
Lua script can be used as a filter condition in signatures. See Lua Scripting for more information.