diff --git a/modules/processing/suricata.py b/modules/processing/suricata.py
index c848cf3ab3b..57fdbf3c3bf 100644
--- a/modules/processing/suricata.py
+++ b/modules/processing/suricata.py
@@ -98,7 +98,19 @@ def run(self):
             "dns_log_full_path": None,
         }
 
-        tls_items = ("fingerprint", "issuerdn", "version", "subject", "sni", "ja3", "ja3s", "serial", "notbefore", "notafter")
+        tls_items = (
+            "fingerprint",
+            "issuerdn",
+            "version",
+            "subject",
+            "sni",
+            "ja3",
+            "ja3s",
+            "ja4",
+            "serial",
+            "notbefore",
+            "notafter",
+        )
 
         SURICATA_ALERT_LOG_FULL_PATH = f"{self.logs_path}/{SURICATA_ALERT_LOG}"
         SURICATA_TLS_LOG_FULL_PATH = f"{self.logs_path}/{SURICATA_TLS_LOG}"