# \#lua

**URL:** https://forum.suricata.io/tag/lua/69.md

[Latest](https://forum.suricata.io/latest.md) · [Categories](https://forum.suricata.io/categories.md) · [Tags](https://forum.suricata.io/tags.md)

---

## [Output-lua: failed to setup thread module with lua-output type: eve-log in Suricata 7.0.11 (Docker / Rocky Linux 9)](https://forum.suricata.io/t/output-lua-failed-to-setup-thread-module-with-lua-output-type-eve-log-in-suricata-7-0-11-docker-rocky-linux-9/6133)

<div class="topic-metadata">

**Author:** [@Deep\_Prajapati](https://forum.suricata.io/u/Deep_Prajapati)\
**Replies:** 2\
**Last updated:** [December 11, 2025, 6:34am UTC](https://forum.suricata.io/t/output-lua-failed-to-setup-thread-module-with-lua-output-type-eve-log-in-suricata-7-0-11-docker-rocky-linux-9/6133 "2025-12-11T06:34:19Z")

</div>

Hello, there is a repeatable issue with lua-output in Suricata 7.0.11 running inside a Docker container when using a simple Lua script with type: eve-log. The Lua script’s init() runs, but Suricata then fails with faile…

---

## [Lua Redis Module Loading Failure in Suricata 8.0.0 DPDK Mode: socket.coreError undefined symbol: lua\_pcall](https://forum.suricata.io/t/lua-redis-module-loading-failure-in-suricata-8-0-0-dpdk-mode-socket-coreerror-undefined-symbol-lua-pcall/5975)

<div class="topic-metadata">

**Author:** [@helloworld2019](https://forum.suricata.io/u/helloworld2019)\
**Replies:** 1\
**Last updated:** [August 25, 2025, 8:26am UTC](https://forum.suricata.io/t/lua-redis-module-loading-failure-in-suricata-8-0-0-dpdk-mode-socket-coreerror-undefined-symbol-lua-pcall/5975 "2025-08-25T08:26:58Z")

</div>

Hello Suricata Community, I’m encountering a module-loading error when using a Lua script to interact with Redis in Suricata 8.0.0 (DPDK mode). The similar test script works flawlessly outside Suricata (e.g., via LuaJIT…

---

## [Question for new lua support](https://forum.suricata.io/t/question-for-new-lua-support/5637)

<div class="topic-metadata">

**Author:** [@haoranli](https://forum.suricata.io/u/haoranli)\
**Replies:** 4\
**Last updated:** [April 23, 2025, 12:46pm UTC](https://forum.suricata.io/t/question-for-new-lua-support/5637 "2025-04-23T12:46:35Z")

</div>

Hi, I upgrade my suricata to 8.0-beta1 release version # suricata --build-info This is Suricata version 8.0.0-beta1 RELEASE Features: PCAP\_SET\_BUFF AF\_PACKET HAVE\_PACKET\_FANOUT LIBCAP\_NG LIBNET1.1 HAVE\_HTP\_URI\_NORMALIZE…

---

## [Lua Detection: key/value not recognized](https://forum.suricata.io/t/lua-detection-key-value-not-recognized/5230)

<div class="topic-metadata">

**Author:** [@h0wdee](https://forum.suricata.io/u/h0wdee)\
**Replies:** 5\
**Last updated:** [January 15, 2025, 2:09pm UTC](https://forum.suricata.io/t/lua-detection-key-value-not-recognized/5230 "2025-01-15T14:09:59Z")

</div>

Please include the following information with your help request: Suricata version Operating system and/or Linux distribution How you installed Suricata (from source, packages, something else) suricata version is 7.0.…

---

## [LUA script for detecting self-signed certificates cannot load](https://forum.suricata.io/t/lua-script-for-detecting-self-signed-certificates-cannot-load/4965)

<div class="topic-metadata">

**Author:** [@marko7781](https://forum.suricata.io/u/marko7781)\
**Replies:** 0\
**Last updated:** [October 29, 2024, 5:18pm UTC](https://forum.suricata.io/t/lua-script-for-detecting-self-signed-certificates-cannot-load/4965 "2024-10-29T17:18:42Z")

</div>

Hello to everyone, I am trying to adopt lua script for detection of self-signed certificates as mentioned in this post Finding self signed TLS certificates - Suricata and Luajit scripting, so I downloaded the lua script…

---

## [Unable require scripts in lua](https://forum.suricata.io/t/unable-require-scripts-in-lua/4690)

<div class="topic-metadata">

**Author:** [@haoranli](https://forum.suricata.io/u/haoranli)\
**Replies:** 4\
**Last updated:** [June 8, 2024, 5:03am UTC](https://forum.suricata.io/t/unable-require-scripts-in-lua/4690 "2024-06-08T05:03:39Z")

</div>

Hi, I use lua for detection, and an error in suricata.log \[111791 - W#01-enp0s8\] 2024-06-06 10:50:59 Warning: detect-lua: Lua script failed to run successfully: /home/suricata/rules/hello.lua:47: attempt to call a nil v…

---

## [Http/2 not working from lua detection or lua output scripts](https://forum.suricata.io/t/http-2-not-working-from-lua-detection-or-lua-output-scripts/4031)

<div class="topic-metadata">

**Author:** [@triton](https://forum.suricata.io/u/triton)\
**Replies:** 7\
**Last updated:** [October 27, 2023, 2:31pm UTC](https://forum.suricata.io/t/http-2-not-working-from-lua-detection-or-lua-output-scripts/4031 "2023-10-27T14:31:26Z")

</div>

Is http/2 from lua output and lua detection currently not supported? I checked against v7.0.0, and I don’t seem to find a way to get any http/2 parsing from a lua script. It was my understanding that http/2 was currentl…

---

## [Analyze Data packet with PythonScript with Lua Rules](https://forum.suricata.io/t/analyze-data-packet-with-pythonscript-with-lua-rules/3787)

<div class="topic-metadata">

**Author:** [@rahim](https://forum.suricata.io/u/rahim)\
**Replies:** 1\
**Last updated:** [August 5, 2023, 4:07pm UTC](https://forum.suricata.io/t/analyze-data-packet-with-pythonscript-with-lua-rules/3787 "2023-08-05T16:07:28Z")

</div>

Hello, I am new in suricata IDPS(and lua). Suricata Build Info This is Suricata version 7.0.0 RELEASE Features: NFQ PCAP\_SET\_BUFF AF\_PACKET HAVE\_PACKET\_FANOUT LIBCAP\_NG LIBNET1.1 HAVE\_HTP\_URI\_NORMALIZE\_HOOK PCRE\_JIT HA…

---

## [Cannot get srcip from the packet buffer in LUA detection script](https://forum.suricata.io/t/cannot-get-srcip-from-the-packet-buffer-in-lua-detection-script/3389)

<div class="topic-metadata">

**Author:** [@koraybilgi](https://forum.suricata.io/u/koraybilgi)\
**Replies:** 1\
**Last updated:** [April 4, 2023, 10:49pm UTC](https://forum.suricata.io/t/cannot-get-srcip-from-the-packet-buffer-in-lua-detection-script/3389 "2023-04-04T22:49:01Z")

</div>

Hi, I have suricata running in IPS mode. I’m trying to read the packet buffer to get the srcip value in the match function. I wrote the following LUA script to test the functionality: function init (args) local nee…

---

## [Performance of Lua-Output in high-alert throughput](https://forum.suricata.io/t/performance-of-lua-output-in-high-alert-throughput/3134)

<div class="topic-metadata">

**Author:** [@sapien](https://forum.suricata.io/u/sapien)\
**Replies:** 4\
**Last updated:** [February 2, 2023, 5:48pm UTC](https://forum.suricata.io/t/performance-of-lua-output-in-high-alert-throughput/3134 "2023-02-02T17:48:59Z")

</div>

Hi, I’m planning on using Suricata for HTTP traffic analysis and high-throughput logging. In my use-case, I need to identify HTTP transactions (request+response) based on some conditions and log them for further proces…

---

## [Lua-5.4.3 and Suricata undefined reference error](https://forum.suricata.io/t/lua-5-4-3-and-suricata-undefined-reference-error/1906)

<div class="topic-metadata">

**Author:** [@Victor](https://forum.suricata.io/u/Victor)\
**Replies:** 7\
**Last updated:** [November 18, 2021, 9:42pm UTC](https://forum.suricata.io/t/lua-5-4-3-and-suricata-undefined-reference-error/1906 "2021-11-18T21:42:41Z")

</div>

Hi, I tried to build Suricata to link with Lua-5.4.3. However, there are a lot of undefined reference errors returning. For examples: output-lua.o: In function ‘LuaStatsLogger’: output-lua.c:385: undefined reference t…

---

## [Lua script run in a rule](https://forum.suricata.io/t/lua-script-run-in-a-rule/1844)

<div class="topic-metadata">

**Author:** [@Victor](https://forum.suricata.io/u/Victor)\
**Replies:** 2\
**Last updated:** [October 25, 2021, 1:11pm UTC](https://forum.suricata.io/t/lua-script-run-in-a-rule/1844 "2021-10-25T13:11:44Z")

</div>

I have a Lua script running with a rule. The Lua script has a print statement to print out some texts. I run the Suricata in USER mode. But, I do not see the print out. I am wondering where is the print out?
