Incomplete response body in eve log

You mean how I invoked suricata? This is how I did it.

docker run --rm --name suricata -v /home/ubuntu/suricata.yaml:/etc/suricata/suricata.yaml -it --net=host --cap-add=net_admin --cap-add=net_raw --cap-add=sys_nice jasonish/suricata:latest -i ens5

The suricata.yaml mapped is the one I sent in my previous message.