You can certainly ask for users’ opinions on particular alerts on this forum. Just remember that it is best to keep the questions more general because many users of Suricata actually use the binary package available on Linux distros. They will not be familiar with the GUI controls offered in the OPNsense and pfSense versions, so questions pertaining to GUI settings are not likely to generate any replies here.
One of the downsides of running Suricata on the WAN side of the two *sense distros (OPNsense and pfSense) is that the Suricata instance is outside of the firewall and thus firewall rules can’t help filter what Suricata is seeing (to prevent it from having to process the “noise” that firewall rules are likely to drop anyway). Another downside of putting it on the WAN is that all the local IP addresses are hidden by NAT (when NAT is used). Thus you can’t readily discern which particular local host is the target or source of something alerting in Suricata because all local traffic presents as the WAN’s public-facing IP address in the alerts.
I created and maintain the GUI package for Suricata on pfSense. I am not an OPNsense user, but I am familiar with how it works in that distro and I do visit their forums regularly as a guest.
In the pfSense package there is a GUI mechanism for quickly adding IP addresses and/or SIDs to the Suppression List so that rules that match the suppress condition do not alert. Not sure if the OPNsense package offers something similar, but I would expect it does.