initial support for suricata events