doc: clarify suricata.yaml location per install

The Quickstart guide installs Suricata from the Ubuntu PPA, where the
config lives at /etc/suricata/suricata.yaml. A source build installs it
under the prefix passed to configure, which defaults to /usr/local, so
the file ends up at /usr/local/etc/suricata/suricata.yaml instead. Add a
note next to the edit step so source-build users are not confused when
the package path does not exist on their system.

Ticket: #8358
Signed-off-by: Samaresh Kumar Singh <ssam3003@gmail.com>
pull/15676/head
Samaresh Kumar Singh 1 month ago committed by Victor Julien
parent ca34fba00c
commit decd897eff

@ -48,6 +48,15 @@ Use that information to configure Suricata::
sudo vim /etc/suricata/suricata.yaml
.. note::
The location of ``suricata.yaml`` depends on how Suricata was installed.
Distribution packages (such as the PPA used above) install it to
``/etc/suricata/suricata.yaml``. A build from source installs it under the
prefix passed to ``configure``, which defaults to ``/usr/local``, so the
file is at ``/usr/local/etc/suricata/suricata.yaml`` instead. See
:ref:`installation` for details.
There are many possible configuration options, we focus on the setup of
the ``HOME_NET`` variable and the network interface configuration. The
``HOME_NET`` variable should include, in most scenarios, the IP address of

Loading…
Cancel
Save