# Truing up deleted rules with threshold file

**URL:** <https://forum.suricata.io/t/truing-up-deleted-rules-with-threshold-file/3578>\
**Category:** Uncategorized\
**Created:** [June 8, 2023, 2:36pm UTC](https://forum.suricata.io/t/truing-up-deleted-rules-with-threshold-file/3578 "2023-06-08T14:36:09Z")\
**Posts on this page:** 1\
**Showing post:** 4

<div class="post-metadata">

**Author:** ![jmtaylor90](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/jmtaylor90/32/20_2.png) [@jmtaylor90](https://forum.suricata.io/u/jmtaylor90)\
**Post date:** [June 8, 2023, 3:22pm UTC](https://forum.suricata.io/t/truing-up-deleted-rules-with-threshold-file/3578/4 "2023-06-08T15:22:37Z")

</div>

It would be interesting to see if it would be possible to have suricata-update handle that in the future since it is aware of the status of rules.

Currently though, as you said, you would need to have a list of active/enabled sids and run that against your threshold contents. I am not sure of any options in the current suricata or related tools that would do it automagically for you.

JT

---

_[View the full topic](https://forum.suricata.io/t/truing-up-deleted-rules-with-threshold-file/3578)._