@Jeff_Lucovsky ,
Kindly let us know what is the minimum number of worker and management threads needed for suricata ?
The number of worker and management threads will correspond to your traffic load and goals and system resources (CPU, memory) as well as the other functions of the box
There must be a least one flow manager/flow recycler.
There must be a least one worker
You can test an existing installation of suricata to simulate one worker — add “–runmode=single” to the command line used to invoke suricata.
ps -p $(pidof suricata) -L will display the the threads created by Suricata