Unable to enable additional rulesets, always defaults to Emerging Threats Open

There are several ‘suricata-update’ files that help it work, here’s a repo where I share some of the configs I use

To have suricata-update create the ‘template config’ files:

suricata-update --dump-sample-configs

Afterwards I suggest editing the sample configs to meet your needs