add-source - Add a source by URL¶

Synopsis¶

suricata-update add-source <name> <url>

Description¶

The add-source adds a source to the set of enabled sources by URL. It is useful to add a source that is not provided in the index.

Options

--http-header "Header: Value"¶

Add an additional HTTP header to requests for this rule source such as a custom API key. Example:

add-source --http-header "X-API-Key: 1234"

HTTP basic authentication can be achieved by setting the HTTP Basic Authentication header with base64(user1:password1). Example:

add-source --http-header "Authorization: Basic dXNlcjE6cGFzc3dvcmQx"

HTTP Bearer authentication can be used by setting the HTTP Bearer Authentication header with a OAuth2 token containing printable ASCII characters. Example:

add-source --http-header "Auhorization: Bearer NjA2MTUOTAx?D+wOm4U/vpXQy0xhl!hSaR7#ENVpK59"

--no-checksum¶: Skips downloading the checksum URL for the rule source.

Common Options¶

-h, --help¶: Show help.

-D <directory>, --data-dir <directory>¶

Set an alternate data directory.

Default: /var/lib/suricata

-c <filename>, --config <filename>¶

Path to the suricata-update config file.

Default: /etc/suricata/update.yaml

-q, --quiet¶: Run quietly. Only warning and error messages will be displayed.

-v, --verbose¶: Provide more verbose output.

--suricata-conf <path>¶

Path to the suricata config file.

Default: /etc/suricata/suricata.yaml

--suricata <path>¶

The path to the Suricata program. If not provided suricata-update will attempt to find Suricata on your path.

The Suricata program is used to determine the version of Suricata as well as providing information about the Suricata configuration.

--suricata-version <version>¶: Set the Suricata version to a specific version instead of checking the version of Suricata on the path.

--user-agent <string>¶: Set a custom user agent string for HTTP requests.