Suricata doesn't have any listening port

Hi,

you might need to write your own wrapping around that, you can use suricatasc (unix socket) to query counters or stats in Suricata and try to expose this to a script/tool that your health check could look for.
I would not expose Suricata directly to an open port.