Switch from Suricata to Snort

[tomjones1977]

When I set up the grid, I configured Suricata with the ET Open ruleset. I am in a position to purchase the Snort subscriber ruleset now and would like to change the IDS engine from Suricata to Snort. Can this be done without a re-install?

[dougburks]

Security Onion 2 does not include or support Snort at this time:
https://docs.securityonion.net/en/2.3/about.html?highlight=snort#security-onion

[EusebioGM]

Hi,
Are you planning to include SNORT in next releasees of Security Onion?
Maybe do you have any forecast about it?
Thanks in advance!

[dougburks]

@EusebioGM Here is the feature request: #4462. There is no timeline. If you have further questions or problems, please start a new discussion rather than replying to somebody else's discussion (per #1720).