Suricata fast.log help!

Since this is specific to the OPNSense implementation I would recommend to ask at the OPNSense forum.