doc: specify buffers that can be used for fast_pattern

Updated notes on the following buffers indicating that they can
be used for fast_pattern:
tls_cert_subject
tls_cert_issuer
tls_sni

diff --git a/doc/userguide/rules/tls-keywords.rst b/doc/userguide/rules/tls-keywords.rst
index 3f371f571b3deeb4efa2b4fac1b9eb17cede2a0f..e8220c64876c3482d46c70e3c4f17e600dbe988e 100644 (file)
--- a/doc/userguide/rules/tls-keywords.rst
+++ b/doc/userguide/rules/tls-keywords.rst
@@ -15,6 +15,8 @@ Examples::
 
 ``tls_cert_subject`` is a 'Sticky buffer'.
 
+``tls_cert_subject`` can be used as ``fast_pattern``.
+
 tls_cert_issuer
 ---------------
 
@@ -27,6 +29,8 @@ Examples::
 
 ``tls_cert_issuer`` is a 'Sticky buffer'.
 
+``tls_cert_issuer`` can be used as ``fast_pattern``.
+
 tls_sni
 -------
 
@@ -39,6 +43,8 @@ Examples::
 
 ``tls_sni`` is a 'Sticky buffer'.
 
+``tls_sni`` can be used as ``fast_pattern``.
+
 tls_cert_notbefore
 ------------------