# Guides
**URL:** https://forum.suricata.io/c/guides/12.md
[Latest](https://forum.suricata.io/latest.md) · [Categories](https://forum.suricata.io/categories.md) · [Tags](https://forum.suricata.io/tags.md)
---
## [About the Guides category](https://forum.suricata.io/t/about-the-guides-category/541)
**Author:** [@ish](https://forum.suricata.io/u/ish)\
**Replies:** 0\
**Last updated:** [August 24, 2020, 6:56pm UTC](https://forum.suricata.io/t/about-the-guides-category/541 "2020-08-24T18:56:26Z")
Guides for using Suricata in various scenarios, and using adjacent tools for interpreting Suricata output or generating Suricata input.
---
## [Compiling Suricata from source on macOS](https://forum.suricata.io/t/compiling-suricata-from-source-on-macos/6447)
**Author:** [@lukashino](https://forum.suricata.io/u/lukashino)\
**Replies:** 0\
**Last updated:** [August 28, 2026, 2:21pm UTC](https://forum.suricata.io/t/compiling-suricata-from-source-on-macos/6447 "2026-08-28T14:21:49Z")
I just went through Suricata compilation on MacOS (26.6.2), and I thought I could capture the process, in here for now. Install build dependencies Install the required build tools and libraries using Homebrew: brew ins…
---
## [Running DPDK Suricata as a Regular User](https://forum.suricata.io/t/running-dpdk-suricata-as-a-regular-user/5847)
**Author:** [@lukashino](https://forum.suricata.io/u/lukashino)\
**Replies:** 0\
**Last updated:** [July 7, 2025, 4:05pm UTC](https://forum.suricata.io/t/running-dpdk-suricata-as-a-regular-user/5847 "2025-07-07T16:05:31Z")
Running DPDK Suricata as a Regular User When I first started working with DPDK Suricata, like most people, I ran everything as root. While this is a common practice, running Suricata as a regular user enhances security b…
---
## [JQ cheat sheet for parsing Suricata EVE outputs](https://forum.suricata.io/t/jq-cheat-sheet-for-parsing-suricata-eve-outputs/3763)
**Author:** [@jufajardini](https://forum.suricata.io/u/jufajardini)\
**Replies:** 0\
**Last updated:** [July 31, 2023, 7:57pm UTC](https://forum.suricata.io/t/jq-cheat-sheet-for-parsing-suricata-eve-outputs/3763 "2023-07-31T19:57:13Z")
JQ quick commands for some common usage situations for Suricata EVE logs As shared by @cthomas in July’s 2023 webinar: Using JQ to parse Suricata logs. Pick out single event type jq -c 'select(.alert)' eve.json Pick ou…
---
## [Guide: Getting Started on RHEL, CentOS and rebuild Linux Distributions](https://forum.suricata.io/t/guide-getting-started-on-rhel-centos-and-rebuild-linux-distributions/538)
**Author:** [@ish](https://forum.suricata.io/u/ish)\
**Replies:** 23\
**Last updated:** [June 1, 2022, 9:17pm UTC](https://forum.suricata.io/t/guide-getting-started-on-rhel-centos-and-rebuild-linux-distributions/538 "2022-06-01T21:17:22Z")
This is a getting started guide for Suricata on RedHat Enterprise Linux and CentOS, including rebuilds likes AlmaLinux and RockyLinux. It should also be applicable to Fedora. Installation Install from OISF Provided RPMs …
---
## [Installing Suricata 6.0.1 with PF\_RING on CentOS8](https://forum.suricata.io/t/installing-suricata-6-0-1-with-pf-ring-on-centos8/1024)
**Author:** [@lukashino](https://forum.suricata.io/u/lukashino)\
**Replies:** 0\
**Last updated:** [January 28, 2021, 7:32pm UTC](https://forum.suricata.io/t/installing-suricata-6-0-1-with-pf-ring-on-centos8/1024 "2021-01-28T19:32:10Z")
Hello everyone, after a problematic install, I thought of writing a little guide to hopefully ease your pain while compiling Suricata on CentOS8 with PF\_RING. During ./configure --enable-pfring phase I was always hit b…
---
## [Guide: Suricata RPMs for RedHat Enterprise Linux and rebuilds](https://forum.suricata.io/t/guide-suricata-rpms-for-redhat-enterprise-linux-and-rebuilds/752)
**Author:** [@ish](https://forum.suricata.io/u/ish)\
**Replies:** 5\
**Last updated:** [December 16, 2020, 11:11pm UTC](https://forum.suricata.io/t/guide-suricata-rpms-for-redhat-enterprise-linux-and-rebuilds/752 "2020-12-16T23:11:22Z")
Introduction The OISF maintains Suricata RPMs for the following Linux distributions: RHEL 9 (AlmaLinux 9, Rocky Linux 9, etc) RHEL 8 (AlmaLinux 8, Rocky Linux 8, etc) And the active Fedora versions. Note: At this tim…