Since we can have scripts for output _or_ detection, it seems more
clear to rename this page to add more meaning
Currently, the ``needs`` key initialization varies, depending on what is the goal of the script: output or detection.
-If the script is for detection, the ``needs`` initialization should be as seen in the example below (see :ref:`lua-scripting` for a complete example for a detect script):
+If the script is for detection, the ``needs`` initialization should be as seen in the example below (see :ref:`lua-detection` for a complete example of a detection script):
::
Lua detection
-------------
-Lua script can be used as a filter condition in signatures. See :ref:`lua-scripting` for more information.
+Lua script can be used as a filter condition in signatures. See :ref:`lua-detection` for more information.
HTTP buffers, etc.
- Provides powerful flexibility and capabilities that Snort does
not have.
-- :doc:`rule-lua-scripting`
+- More details in: :ref:`lua-detection`
Fast Pattern
------------
ip-reputation-rules
config
datasets
- rule-lua-scripting
+ lua-detection
differences-from-snort
-.. _lua-scripting:
+.. _lua-detection:
-Lua Scripting
-=============
+Lua Scripting for Detection
+===========================
Syntax: