Suricata and Crowdsec

Started by FyreWall, November 07, 2026, 11:45:35 PM

Previous topic - Next topic
Trying out running Suricata as an IDS and Crowdsec as an IPS.
I have both enabled with Suricata set to just alert.

I see a lot of alerts in Suricata for port scans but no action from Crowdsec regarding the Suricata alerts.
Is that normal or should Crowdsec be taking action on the Suricata alerts?