The SLS project is hosted on our GitHub repository
The syntax checking identifies syntax errors and – maybe even more interesting – it also provides warnings about performance issues as well as hints to help the rules writer.
The second key feature is auto-completion. This is performed using a direct link to the documentation as you can see in this screenshot of a Neovim editor using SLS:
SLS also provides real-time performance guidance to the rule writer. It does so with feedback from the Suricata engine and with logic implemented in SLS itself. Performance guidance includes hints such as information about automatic Suricata fast pattern selection and warnings about potential serious performance issues caused by a rule that only has a PCRE regular expression.
