Daemonmove (suricata eve.log parser) is usual systemd service and can be managed as usual:

systemctl start daemonmove

systenctl stop daemonmove.

The configuration file conf.cfg for the daemonmove service is located in the /etc/redismove directory.
This file defines the main operating parameters of the service, including keys for event distribution and paths to log and temporary files.
Keys corresponde to events names.
Main key is redis key to which suricata outputs eve.log.

# Configuration file for the application

application:
{
main:
{
title = “REDISMOVE”;
version = “0.8.2”;
date = “23 Mar 2024”;
};

settings:
{
main_key = “suricata”;
keys = (“alert”, “anomaly”, “dcerpc”, “flow”, “http”, “dns”, “drop”, “stats_report”, “fileinfo”, “tls”, “stats”, “ftp”, “sip”, “smb”, “snmp”, “ssh”, “flow_data”, “tftp”, “ssh”, “bittorrent_dht”, “rdp”, “http2”, “pqsql”, “quic”, “modbus”);
valid_duration = 24;
log_file = “/var/log/suricata/eve.json”;
temp_file = “/tmp/daemonparser/current”;
};