# Eve.json with 'weird' output and no ALERTS

**URL:** <https://forum.suricata.io/t/eve-json-with-weird-output-and-no-alerts/2001>\
**Category:** Help\
**Created:** [December 8, 2021, 2:49am UTC](https://forum.suricata.io/t/eve-json-with-weird-output-and-no-alerts/2001 "2021-12-08T02:49:55Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Clint\_Legg](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/clint_legg/32/1132_2.png) [@Clint\_Legg](https://forum.suricata.io/u/Clint_Legg)\
**Post date:** [December 8, 2021, 2:49am UTC](https://forum.suricata.io/t/eve-json-with-weird-output-and-no-alerts/2001/1 "2021-12-08T02:49:55Z")

</div>

I’m hoping this is something that is from a simple misconfig. The eve.json has some ODD content and when I run tail -f and looking for incoming ALERTS etc, nothing but the odd conent comes in. The log file and suricata.yaml is attached.

Appreciate any help / suggestions.

[suricata.yaml](https://forum.suricata.io/uploads/short-url/pPNzSeaxfTl7KQ7AEKZL46PnZCe.yaml) (73.6 KB)

[eve.json](https://forum.suricata.io/uploads/short-url/9JFDg9IdJmlZgdRjYc7o0VVN7Kw.json) (87.7 KB)

---

<div class="post-metadata">

**Author:** ![vjulien](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/vjulien/32/4_2.png) [@vjulien](https://forum.suricata.io/u/vjulien)\
**Post date:** [December 8, 2021, 7:54am UTC](https://forum.suricata.io/t/eve-json-with-weird-output-and-no-alerts/2001/2 "2021-12-08T07:54:39Z")

</div>

Nothing weird there, just the stats records getting logged because there is no traffic.