Why suricata don't generate filehash for alerts

You could try to enable the file-store and if that doesn’t help it would be ideal if you could provide the rule that you used and even better the pcap as well.