Hi Erik, I believe that Stefan has already enabled this in this commit: https://git.ipfire.org/?p=ipfire-2.x.git;a=commitdiff;h=616395f37c6d096607283cc17e5554cc03e9bcc6 Are you saying that the library wasn’t linked before? I am not sure what this patch is meant to achieve - assuming that Stefan’s change isn’t broken. -Michael > On 4 Jun 2019, at 14:00, Erik Kapfer wrote: > > The EVE output facility outputs alerts, metadata, file info and protocol specific records through JSON. > for further informations please see --> https://suricata.readthedocs.io/en/suricata-4.1.2/output/eve/index.html . > > Signed-off-by: Erik Kapfer > --- > lfs/suricata | 2 ++ > 1 file changed, 2 insertions(+) > > diff --git a/lfs/suricata b/lfs/suricata > index 310920606..6f779d875 100644 > --- a/lfs/suricata > +++ b/lfs/suricata > @@ -80,6 +80,8 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) > --enable-nfqueue \ > --disable-static \ > --disable-python \ > + --with-libjansson-libraries=/usr/lib \ > + --with-libjansson-includes=/usr/include \ > --disable-suricata-update > cd $(DIR_APP) && make $(MAKETUNING) > cd $(DIR_APP) && make install > -- > 2.12.2 >