Doubts about active or disabled rules

Hi @Douglas_Ribeiro!

This seems alright if you want to see the rule stats. Here, you see the number of rules loaded and failed with the Suricata engine. If you want to check active rules, suricata-update would be able to give you the best results.
If you run suricata-update, you’ll see a line like
14/10/2020 -- 19:49:09 - <Info> -- Writing rules to /var/lib/suricata/rules/suricata.rules: total: 28335; enabled: 21311; added: 172; removed 3; modified: 7114

Active rules: 21311 in the file /var/lib/suricata/rules/suricata.rules.

(Added, removed etc are because it is the rule manager and keeps on updating the rules as per flowbit dependencies and/or changes from the rule source)

This also gives you the file name where your rules are stored, so you can check that file out for all the rules. (The ones starting with # are disabled, rest are enabled)

We are working on generating a report of any changes made to the rules so its easy to check if something was changed among the existing rules: https://github.com/OISF/suricata-update/pull/246