Suricata only logs a flow when it considers the flow finished or timed out. There has been some discussion about making it dump flows on some interval, but we haven’t decided is it is worth the effort for us.
There is a ticket here: Feature #2301: netflow: dump records at interval - Suricata - Open Information Security Foundation