How to edit suricata config?

[techstartupexplorer]

Hello,
how to edit suricata config? the documentation doesn't provide much info using salt...

[robbiemarshall]

Are you wanting to edit the suricata config itself, or one or more of the rules?

[techstartupexplorer]

yes i want to edit suricata config but its on read-only whenever i tgry to edit it via docker exec suricata /bin/bash

[robbiemarshall]

You'll want to edit the suricata.yaml file. Documentation on how to do this can be found here: https://docs.securityonion.net/en/2.3/suricata.html#configuration