FYI: You might find the usecase of Suricata stats interesting