Hi guys.
What is the best way to run suricata-update without loading the rules that come with the suricata package?
Is there any other any rather then disable by group in disable.conf?
Thanks!
At the moment that is the best way. We need to think about making this better and it has come up before. I just created a ticket as a reminder: