[Community]: Zeek & Suricata Integration documentation

[Scrappy34]

What documentation page is affected

https://www.elastic.co/docs/reference/integrations/zeek
https://www.elastic.co/docs/reference/integrations/suricata

What change would you like to see?

I received a customer question from a large account requesting to have the documentation updated to reflect the current version of both Suricata and Zeek. It will help them with their compliance reporting tremendously.

Additional info

No response

[kosabogi]

Thanks for reaching out and highlighting this. We’ve reviewed the issue and added it to our backlog for an upcoming sprint. We’ll keep this thread updated as we make progress. Your feedback helps us make the docs better for everyone. Thank you.

[colleenmcginnis]

@Scrappy34 can you be more specific about what needs to be updated?

cc @elastic/integration-experience (as the codeowners of these integrations)

[Scrappy34]

@colleenmcginnis The version numbers listed in the compatibility section of our documentation are several version behind the current version of Zeek & Suricata. It is causing some issues for our customers who have to answer compatibility questions that are compliance related. Is it possible to update the respective sections to thecurrent versions of each tool?

[colleenmcginnis]

The @elastic/integration-experience team would need to confirm that the integrations have been tested against newer versions of Zeek and Suricata.

[qcorporation]

@colleenmcginnis @Scrappy34 - thank you for reaching out.
The versions from our integration docs: Zeek 2.6.1 released on Feb 4, 2019, and Suricata 4.0.4 released on Feb 14, 2018 are fairly old.
There have been changes to the two integrations but not ones suggesting an updated compatibility for newer versions of the two product lines.

So we can not claim to support newer versions without doing an engineering assessment.
We will however be planning the work within our backlog for these and other updates.

cc.ing @cpascale43, @jamiehynds.

---

Also tagging @mjwolf to seeing if we can help the docs team with our docs generation tool for these integrations

[bmorelli25]

Blocked by engineering