After the update to 25.1.4 suricata doesnt create the "latest.log" anymore. Also the "suricata_" does not contain any helping info.
The logfiles also can not be viewed in the webinterface. The spinner is constantly running. even after resetting all logfiles in OPNsense.
Suricata is blocking but not logging its actions.
Does it work as expected if you revert it ?
opnsense-revert -r 25.1.3 suricata
Quoteopnsense-revert -r 25.1.3 suricata
this fixed it. the logfiles reappeared.
after updating to OPNsense 25.1.4_1-amd64 and suricata 7.0.10 again it works again.
Did 25.1.4_1 change anything? The hotfix is not listed.
Great so Suricata is fine, this was just collateral damage. 25.1.4_1 was this patch
https://forum.opnsense.org/index.php?action=post;quote=233338;topic=46556 (https://forum.opnsense.org/index.php?action=post;quote=233338;topic=46556)
Yes, looks like the hotfix was the missing piece.
Cheers,
Franco