Userguide: clarify lua's need key usage differences (Doc#4725) - v1

[jufajardini]

Link to redmine ticket:
https://redmine.openinfosecfoundation.org/issues/4725

Describe changes:

• add explanation about the difference in usage when writing output or detection script
• add some more examples showing how to initialize need in case of detection script
• rename Lua Scripting page, in Rules section, to Lua Scripting for Detection, for better semantics
• update said page with other existing buffers for detection
• nit: fix typo in Lua output page

[codecov]

Codecov Report

Merging #6480 (cee1be9) into master (07370ed) will increase coverage by 0.02%.
The diff coverage is n/a.

@@            Coverage Diff             @@
##           master    #6480      +/-   ##
==========================================
+ Coverage   77.05%   77.08%   +0.02%     
==========================================
  Files         613      613              
  Lines      186733   186734       +1     
==========================================
+ Hits       143890   143938      +48     
+ Misses      42843    42796      -47     

Flag	Coverage Δ
fuzzcorpus	52.85% <ø> (ø)
suricata-verify	52.13% <ø> (+0.04%)	⬆️
unittests	63.12% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

[inashivb]

Question: do false and "false" mean the same thing in Lua?

[jufajardini]

If you do:

print(type("false"))
print(type(false))

First will print string, second will print boolean

But print(type(tostring(false))) and print(type(tostring("false"))) both are strings...
Not sure if this answers your question 😅

[suricata-qa]

WARNING:

field	test	baseline	%
	tlpr1_stats_chk
.flow.mgr.rows_maxlen	364	539	67.53%

Pipeline 4661

[jufajardini]

WARNING:
field test baseline %
tlpr1_stats_chk
.flow.mgr.rows_maxlen 364 539 67.53%

Pipeline 4661

🤔

[ct0br0]

thinking

I wouldn't worry about it. A lot of the small stats (especially these ones that came about after the flow fix a couple weeks ago) are nothing major.

[jufajardini]

thinking

I wouldn't worry about it. A lot of the small stats (especially these ones that came about after the flow fix a couple weeks ago) are nothing major.

Thanks, was especially curious because this supposedly only changed documentation pages...

[victorjulien]

Merged in #6642, thanks!