The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Importing Snort rules for the Suricata Snort engine

Prev Next

This sample user scenario describes the steps for the following activities:

  • Selecting the Suricata Snort engine

  • Rebooting the Sensor

  • Importing Snort variables and rules from a file

  • Viewing the status of the imported Snort rules

  • Viewing the imported Snort variables

  • Pushing changes from the Manager to the Sensor

Note

You can configure the Snort engine at a global level but can override the setting per Sensor and select a different engine at a Sensor level. In this scenario, you will be configuring the Snort engine at a global level.