Thanks for the eve.json file.
Do you mean that these configuration options are not working for 7.0.6, that is, Suricata overwrites these? Does this mean that with 6.0.15 (do note that we just released 6.0.20) you are able to see s7comm events in the eve log?
On a side note, I’ve noticed that your eve.log only has flow events, and all app-proto fields are “failed”. In cases like these, enabling anomaly events might be a good idea, to further investigate. Does your pcap only contain S7comm traffic?