This is the code as of commit #c346ff7 over [there](https://github.com/elastic/filebeat-module-suricata/pull/1)

See #7251 and #7224 for more details.

This patch updates the packaging scripts to copy modules from
x-pack/filebeat into Elastic-licensed packages.

* Vendorize goimports (#8619)

* Fix make fmt after vendoring goimports (#8623)

This updates the suricata module:

- Added fields from eve.json
- Copy fields of interest into ECS equivalent
- Updated dashboards

This PR adds an intermediate solution for packaging X-Pack modules with Filebeat. In this PR the dashboards, configuration files, and fields are generated in x-pack/filebeat. Packaging is still done entirely from the OSS filebeat directory by making the build run `mage update` in x-pack/filebeat then customizing the packaging configuration to point to different dashboards, config, and fields.yml for the Elastic licensed packages.

Long term we will build, test, and package the OSS and Elastic licensed Beats from their respective directories, but this gives us a smaller step in order to be able to release the X-Pack content before the build system is fully transitioned.

Co-authored-by: Adrian Serrano <adrisr83@gmail.com>
Co-authored-by: Andrew Kroh <andrew.kroh@elastic.co>

Mostly making all vis and searches end in [Suricata].

Part of #8153.

The ingest pipeline for suricata's eve fileset uses the user-agent
plugin. This updates the manifest to include this requirement.

Added Filebeat module test cases for suricata/eve.

To support to running Filebeat module tests from x-pack/filebeat an env var MODULES_PATH was added to allow the existing tests to run against a different module directory than the OSS module dir.

Added some missing fields to pass validation.

Added sample eve.json files for validation.

Jenkins is failing during artifact archival. This might fix it.

Jenkins is failing during artifact archival. This might fix it.

Run make fix-permissions on the x-pack/filebeat after executing tests.

The problem was the ownership of files rather than the symlinks.