Suricata

Some events from our stats can get quite verbose, especially considering that many of the counters
are often zero.
It is probably a good idea to allow users to hide counters that are zero, but there may be some that should be logged even if when zero, as that value also carries a value.

Proper investigate this, and how to implement what we decide on.

Related to this: should we allow the possibility of enabling or disabling specific counters/events via unix socket?