suricata-update update-sources
The update-sources
command downloads the latest index of available sources.
/var/lib/suricata/rules/.cache/index.yaml
Where the downloaded source index is cached.
- SOURCE_INDEX_URL
This environment variable allows the specification of an alternate URL to download the index from.
https://www.openinfosecfoundation.org/rules/index.yaml
The default URL used to download the index from.