yaml: move classification etc below the rules

8 years ago · 766bc95e3c
parent 1b4e1ea389
commit 766bc95e3c
1 changed files with 4 additions and 4 deletions
--- a/suricata.yaml.in
+++ b/suricata.yaml.in
@ -47,10 +47,6 @@ vars:
 ## Step 2: select the rules to enable or disable
 ##

-classification-file: @e_sysconfdir@classification.config
-reference-config-file: @e_sysconfdir@reference.config
-# threshold-file: @e_sysconfdir@threshold.config
-
 default-rule-path: @e_sysconfdir@rules
 rule-files:
 - botcc.rules
@ -104,6 +100,10 @@ rule-files:
 # - modbus-events.rules  # available in suricata sources under rules dir
 # - app-layer-events.rules  # available in suricata sources under rules dir

+classification-file: @e_sysconfdir@classification.config
+reference-config-file: @e_sysconfdir@reference.config
+# threshold-file: @e_sysconfdir@threshold.config
+

 ##
 ## Step 3: select outputs to enable