On 23/07/19 at 18:58, Hovsep Levi wrote: > I'm trying to enable the EVE log in conjunction with fast.log and for some > reason it doesn't work. Can you paste suricata --build-info? Also try to start suricata with -vvv so we might catch any issues there. -- Andreas Herz