[WIP] initial support for suricata events