Change log for GCP_APP_ENGINE

Date Changes
2025-12-29 - event.idm.read_only_udm.principal.ip: Newly mapped `protoPayload.requestMetadata.callerIp` raw log field with `event.idm.read_only_udm.principal.ip` UDM field.
- event.idm.read_only_udm.principal.asset.ip: Newly mapped `protoPayload.requestMetadata.callerIp` raw log field with `event.idm.read_only_udm.principal.asset.ip` UDM field.
- event.idm.read_only_udm.principal.user.email_addresses: Newly mapped `protoPayload.authenticationInfo.principalEmail` raw log field with `event.idm.read_only_udm.principal.user.email_addresses` UDM field.
- event.idm.read_only_udm.metadata.product_event_type: Newly mapped `protoPayload.methodName` raw log field with `event.idm.read_only_udm.metadata.product_event_type` UDM field.
- event.idm.read_only_udm.target.resource.name: Newly mapped `protoPayload.resourceName` raw log field with `event.idm.read_only_udm.target.resource.name` UDM field.
- event.idm.read_only_udm.target.application: Newly mapped `protoPayload.serviceName` raw log field with `event.idm.read_only_udm.target.application` UDM field.
- event.idm.read_only_udm.target.resource.attribute.labels: Newly mapped `protoPayload.resourceLocation.currentLocations` raw log field with `event.idm.read_only_udm.target.resource.attribute.labels` UDM field.
- event.idm.read_only_udm.principal.resource.attribute.labels: Newly mapped `protoPayload.authenticationInfo.oauthInfo.oauthClientId` raw log field with `event.idm.read_only_udm.principal.resource.attribute.labels` UDM field.
- event.idm.read_only_udm.additional.fields: Newly mapped `protoPayload.requestMetadata.requestAttributes.time`, `operation.first`, `protoPayload.serviceData.updateService.request.updateMask`, `operation.id`, `protoPayload.authenticationInfo.serviceAccountKeyName` raw log fields with `event.idm.read_only_udm.additional.fields` UDM field.
- event.idm.read_only_udm.security_result.rule_name: Newly mapped `protoPayload.authorizationInfo.permission` raw log field with `event.idm.read_only_udm.security_result.rule_name` UDM field.
- event.idm.read_only_udm.security_result.description: Newly mapped `protoPayload.authorizationInfo.permissionType` raw log field with `event.idm.read_only_udm.security_result.description` UDM field.
- event.idm.read_only_udm.security_result.action: Newly mapped `protoPayload.authorizationInfo.granted` raw log field with `event.idm.read_only_udm.security_result.action` UDM field.
- The conditional logic for security_result.severity was updated to include "NOTICE" in addition to "INFO" for setting the severity to "INFORMATIONAL".
2024-08-01 - If principal machine data is present, then set "metadata.event_type" to "STATUS_UPDATE".
- Mapped "protoPayload.ip" to "principal.ip" and "principal.asset.ip".
- Mapped "protoPayload.appId" to "principal.resource.attribute.labels".
- Mapped "protoPayload.host" to "principal.hostname".
- Mapped "protoPayload.method" to "network.http.method".
- Mapped "protoPayload.@type" , "labels.clone_id" and "operation.producer" to "additional.labels".
2024-06-03 - Added support for a new type of JSON logs.
2024-03-05 - Newly created parser.