Adds LLM performance matrix doc to ESS & serverless

docs/assistant/llm-performance-matrix.asciidoc

@@ -0,0 +1,15 @@
+[[llm-performance-matrix]]
+= Large language model performance matrix
+
+This table describes the performance of various LLMs for different use-cases in {elastic-sec}, based on our internal testing. To learn more about these use-cases, refer to <<attack-discovery, Attack discovery>> or <<security-assistant, AI assistant>>.
+
+[cols="1,1,1,1,1,1,1", options="header"]
+|===
+| *Feature*                     | *Model*               |                    |                   |         |              |             
+|                               | *Claude 3: Opus*      | *Claude 3: Sonnet* | *Claude 3: Haiku* | *GPT-4o* | *GPT-4 Turbo*| *GPT-4 32K* 
+
+| *Assistant - General*         | Excellent             | Excellent          | Excellent         | Excellent | Excellent     | Excellent
+| *Assistant - {{esql}} Generation*| Great                 | Great              | Poor              | Excellent | Poor          | Excellent
+| *Assistant - Alert Questions* | Excellent             | Excellent          | Excellent         | Excellent | Poor          | Good (limited context)
+| *Attack Discovery*            | Excellent             | Great              | Poor              | Poor      | Good          | Good (limited context)
+|===

docs/assistant/security-assistant.asciidoc

@@ -194,6 +194,7 @@ In addition to practical advice, AI Assistant can offer conceptual advice, tips,
 
 
 include::ai-alert-triage.asciidoc[leveloffset=+1]
+include::llm-performance-matrix.asciidoc[leveloffset=+1]
 include::azure-openai-setup.asciidoc[leveloffset=+1]
 include::connect-to-openai.asciidoc[leveloffset=+1]
 include::connect-to-bedrock.asciidoc[leveloffset=+1]

docs/serverless/assistant/llm-performance-matrix.mdx

@@ -0,0 +1,19 @@
+---
+id: llm-performance-matrix
+slug: /serverless/security/llm-performance-matrix
+title: Large language model performance matrix
+description: Learn how different models perform on different tasks in ((elastic-sec)).
+tags: ["security", "overview", "get-started"]
+status: in review
+---
+
+This table describes the performance of various LLMs for different use-cases in ((elastic-sec)), based on our internal testing. To learn more about these use-cases, refer to <DocLink id="attackDiscovery" text="Attack discovery"/> or <DocLink id="serverlessSecurityAIAssistant" text="AI Assistant"/>.
+
+|           **Feature:**        | **Model**             |                    |                    |            |                 |                |
+|-------------------------------|-----------------------|--------------------|--------------------|------------|-----------------|----------------|
+|                               | **Claude 3: Opus**    | **Claude 3: Sonnet** | **Claude 3: Haiku** | **GPT-4o** | **GPT-4 Turbo** | **GPT-4 32K**  |
+| **Assistant: general**       | Excellent             | Excellent          | Excellent          | Excellent  | Excellent       | Excellent      |
+| **Assistant: ((esql)) generation** | Great           | Great              | Poor               | Excellent  | Poor            | Excellent      |
+| **Assistant: alert questions** | Excellent          | Excellent          | Excellent          | Excellent  | Poor            | Good (limited context) |
+| **Attack Discovery**          | Excellent             | Great              | Poor               | Poor       | Good            | Good (limited context) |
+

docs/serverless/serverless-security.docnav.json

@@ -30,6 +30,9 @@
         {
           "id":"serverlessSecurityAssistantAlertTriage"
         },
+        {
+          "id":"llm-performance-matrix"
+        },
         {
           "id": "serverlessSecurityConnectBedrock"
         },