To get the Emerging Threats Open ruleset simply run: suricata-update If you choose to not add yourself to the suricata group you will have to prefix the suricata-update commands with sudo. You will need to logout and log back in again to become a member of this group. By adding user accounts to this group, users can view the logs as well as run suricata-update without using sudo or becoming root.Īfter installation it is recommended to add your user to the suricata group. sudo yum -y install epel-releaseĪ note on permissions: The Suricata RPM will create a group, suricata which Suricata will run-as after startup. Suricata can also be installed from EPEL, however these packages are not maintained or tested by the OISF, and may not be the latest version due to policies outside our control. Please see Guide: Suricata RPMs for CentOS and Fedora for more information on the OISF provided RPMs as well as installing other supported versions of Suricata. Installation Install from OISF Provided RPMs yum install epel-release yum-plugin-copr Most parts of this guide are currently applicable to Fedora as well. This is a short getting started guide for Suricata on CentOS using packages available in the official repos.

Centos 7 latest version