doc/transform: Document case-changing transforms.

Issue: 6439
OISF · Nov 9, 2023 · f6b21f8 · f6b21f8
1 parent 84ce82b
commit f6b21f8
Showing 1 changed file with 20 additions and 0 deletions.
diff --git a/doc/userguide/rules/transforms.rst b/doc/userguide/rules/transforms.rst
@@ -134,3 +134,23 @@ Example::
 
     alert http any any -> any any (msg:"HTTP with xor"; http.uri; \
         xor:"0d0ac8ff"; content:"password="; sid:1;)
+
+to_lowercase
+------------
+
+Converts the buffer to lowercase.
+
+Example::
+
+    alert http any any -> any any (http.uri; to_lowercase; \
+        content:"|this text has been converted to lowercase|"; sid:1;)
+
+to_uppercase
+------------
+
+Converts the buffer to uppercase.
+
+Example::
+
+    alert http any any -> any any (http.uri; to_uppercase; \
+        content:"|THIS TEXT HAS BEEN CONVERTED TO UPPERCASE|"; sid:1;)