Suricata is integrated by default, it’s built-into the “heavy” agent. You just need to specify
AGENT_TYPE=heavy
NIDS_ENABLED=true
in the .conf file of the manager and it will install and configure Suricata during the initial setup.
However, this is the simplest and easiest case where all network monitoring will be done from the manager instance.
The optimal way to do it is to create another VM and setup the “heavy” agent there. Set this other VM to promiscuous mode and it will monitor all traffic for all IPs on the network.