Suricata

https://github.com/inliniac/suricata/pull/1578

Enable through:

logging:
  default-log-level: notice
  #default-log-format: "[%i] %t - (%f:%l) <%d> (%n) -- " 
  default-output-filter:
  # Define your logging outputs.  If none are defined, or they are all
  # disabled you will get the default - console output.
  outputs:
  - console:
      enabled: yes
  - file:
      enabled: yes
      filename: /var/log/suricata.log
  - file:
      enabled: yes
      type: json
      filename: /var/log/suricata.json
  - syslog:
      enabled: no
      facility: local5
      format: "[%i] <%d> -- "