Is there any way to make Suricata generate alerts only for rules with priority 1?
As far as I know, the only way is to disable rules that have priority!=1
This is a bit problematic since most of the standard rules do not define a priority but rather inherent the priority from the class-type
So the approach will be to keep only rules with defined priority keyword with value equal 1 or rules with class-type having priority set to 1