Suricata

Currently, a rule like:

"alert http any any -> any any (http.request_line; content:\"GET /index.html HTTP/1.0\"; sid:61;)" 

Will still generate the warning that should be used only when outdated HTTP keywords are used:

"pattern looks like it inspects HTTP, use http.request_line or http.method and http.uri instead for improved performance" 

Expected behavior:
The warning should only be triggered if the rule still uses the corresponding legacy content modifier.