centos6.8下手动安装libjansson支持suricata输出json格式日志

suricata是开源的snort IDS，关于图形化日志的统计展示，过去都是搭配snorby。想把suricata ids的日志导入到elk，snorby这种方式安装配置复杂，现在采取统一用logstash发送到elasticsearch。

前提suricata需要生成json日志，在suricata.yaml配置好后，结果在/var/log/suricata/目录下无法找到json格式日志。没有生成。使用命令 suricata --build-info发现

 This is Suricata version 3.1 RELEASE
        Features: NFQ PCAP_SET_BUFF LIBPCAP_VERSION_MAJOR=1 AF_PACKET HAVE_PACKET_FANOUT LIBCAP_NG HAVE_HTP_URI_NORMALIZE_HOOK HAVE_NSS HAVE_LUA HAVE_LIBJANSSON TLS 
        SIMD support: SSE_4_2 SSE_4_1 SSE_3 
        Atomic intrisics: 1 2 4 8 byte(s)
        32-bits, Little-endian architecture
        GCC version 4.4.7 20120313 (Red Hat 4.4.7-23), C version 199901
        compiled with _FORTIFY_SOURCE=0
        L1 cache line size (CLS)=64
        thread local storage method: __thread
        compiled with LibHTP v0.5.20, linked against LibHTP v0.5.20        
        Suricata Configuration:
          AF_PACKET support: