While having a glance at the IPS logs I found this warning:
Multipline "include" fields at the same level are deprecated and will not work in Suricata 8, please move to an array of include files: line: 14
Will that issue be adressed by devs, when upgrading to version 8 or even beforehand?