yaml: move classification etc below the rules

diff --git a/suricata.yaml.in b/suricata.yaml.in
index 5ccb138dab6889dde0d4c0fa43149043a7479ad5..bdd754135a70aa7b76ad924ee63a4fd2e1f8baa8 100644 (file)
--- a/suricata.yaml.in
+++ b/suricata.yaml.in
@@ -47,10 +47,6 @@ vars:
 ## Step 2: select the rules to enable or disable
 ##
 
-classification-file: @e_sysconfdir@classification.config
-reference-config-file: @e_sysconfdir@reference.config
-# threshold-file: @e_sysconfdir@threshold.config
-
 default-rule-path: @e_sysconfdir@rules
 rule-files:
  - botcc.rules
@@ -104,6 +100,10 @@ rule-files:
 # - modbus-events.rules  # available in suricata sources under rules dir
 # - app-layer-events.rules  # available in suricata sources under rules dir
 
+classification-file: @e_sysconfdir@classification.config
+reference-config-file: @e_sysconfdir@reference.config
+# threshold-file: @e_sysconfdir@threshold.config
+
 
 ##
 ## Step 3: select outputs to enable