No output module named eve-log.ike

Hello Suricata Community!
I recently started using suricata and I stumbled upon a problem for which I could not find any reasonable solution.
I input suricata -T to test my suricata, I get this errors:

14/10/2022 -- 08:33:24 - <Error> - [ERRCODE: SC_ERR_INVALID_ARGUMENT(13)] - No output module named eve-log.ike

It seems that there is something wrong with the eve-log module.
But I think my eve log module is OK.
image
Could anyone guide me what I am doing wrong?

Hi.
Please paste the output section of your suricata.yaml file. Looks like there might be a typo


This is the output part of my yaml file

Are you sure that is the complete output?
That is usually are very long yaml key.
You could also try running suricata --dump-config | grep ike

What version are you running? The output ikev2 was renamed to ike.
Besides that, it’s better to post text files instead of screenshots

Yes, I’m sorry,My version is 6.0.8 realese.
Then I have a few questions for your advice.

  1. What are ike files?
  • I think ike files are plug-ins
  1. Does this error indicate that I lack eve-log.ike?

14/10/2022 -- 08:33:24 - <Error> - [ERRCODE: SC_ERR_INVALID_ARGUMENT(13)] - No output module named eve-log.ike

3.If I lack eve-log.ike,Why does my suricata still output eve-log.

IKE is a protocol. If you use 6.0.8 you should ues ikev2 since ike is used in 7.0. So you just need to update your config to use ikev2 until you switch to 7.0 (which is not released yet).
You might have gotten the config file from a 7.0 branch

Thanks! I understand.
I installed 7.0 at first,then I installed 6.0.8,that could be the reason.