Suricate Flow event doesn't display ongoing ssh session

Help
2

Hi @gent79reid!
Are you not seeing any flow events at all? Could you please check the “flow” setting under “outputs -> eve-log -> types” in your suricata.yaml if flow is listed just to be sure? It should have:

outputs:
  - eve-log:
    enabled: yes
    # other things
    types:
      - flow