Since I don't have any entries in the 'Alerts' tab, I was wondering which woud be the best way to check that Suricata is actually running ?
Tia.
You can SSH into the box. Select option 8 for shell.
root@opnsense:/var/log/suricata # service suricata status
suricata is running as pid 87056.
Also you can check the log in /var/log/ and var/log/suricata
Or run a top command to see if suricata is loaded.
Depends on your rules there might be no alterts.
Thanks, it's working: ;D
root@gateway:~ # service suricata status
suricata is running as pid 23173.