Suricata will not work properly with any Snort3 rules, so only use rules files designed for Snort 2.9.x versions with Suricata.

Sign up for a free snort account.

Under Services > Suricata > Global Settings

Tick “Install Snort rules”.

Against “Snort Rules Filename”, enter 2.9.x Snort release filename e.g. snortrules-snapshot-29120.tar.gz from https://www.snort.org/downloads.

Enter “Snort Oinkmaster Code”.