diff --git a/datasets/emerging_threats/php2shell/php2shell.yml b/datasets/emerging_threats/php2shell/php2shell.yml
index dcf4bfb7..ce7db4a4 100644
--- a/datasets/emerging_threats/php2shell/php2shell.yml
+++ b/datasets/emerging_threats/php2shell/php2shell.yml
@@ -36,3 +36,7 @@ datasets:
   path: /datasets/emerging_threats/php2shell/zeek_large_post_body.log
   sourcetype: zeek:http
   source: http.log
+- name: suricata
+  path: /datasets/emerging_threats/php2shell/suricata.log
+  sourcetype: suricata
+  source: not_applicable
diff --git a/datasets/emerging_threats/php2shell/suricata.log b/datasets/emerging_threats/php2shell/suricata.log
new file mode 100644
index 00000000..1083eaf4
--- /dev/null
+++ b/datasets/emerging_threats/php2shell/suricata.log
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:7b30d6960cfa273063dd42d706606fd4e000d34789ea55b4a6a33906a33e5c64
+size 1144