In 8.0, Lua rules are enabled by default.
* ``lua`` rule keyword.
* ``luaxform`` transform.
-.. note:: Lua is disabled by default for use in rules, it must be
- enabled in the configuration file. See the ``security.lua``
- section of ``suricata.yaml`` and enable ``allow-rules``.
+.. note:: As of Suricata 8.0, Lua rules are enabled by default and run
+ in a sandboxed environment. See :ref:`lua-sandbox`.
Lua Rule Keyword
----------------
More details in :ref:`lua-transform`.
+.. _lua-sandbox:
+
Lua Sandbox and Available functions
-----------------------------------