Change log for MCAFEE_DLP

Date	Changes
2025-12-04	Enhancement: -event.idm.read_only_udm.principal.labels: Removed mapping of status_id from event.idm.read_only_udm.principal.labels UDM field since it is deprecated. -event.idm.read_only_udm.additional.fields: Mapped status_id raw log field to event.idm.read_only_udm.additional.fields UDM field. - Added null conditional checks for the fields to ensure they are not empty before processing. - event.idm.read_only_udm.metadata.event_type: If has_principal_user flag is true, updated to USER_UNCATEGORIZED. - event.idm.read_only_udm.metadata.event_type: If has_principal flag is true, updated to STATUS_UPDATE. - event.idm.read_only_udm.target.asset.hostname: Newly mapped dst raw log field with event.idm.read_only_udm.target.asset.hostname UDM field. - event.idm.read_only_udm.principal.asset.ip: Newly mapped ip_address field with event.idm.read_only_udm.principal.asset.ip UDM field. - event.idm.read_only_udm.principal.asset.hostname: Newly mapped device_name raw log field with event.idm.read_only_udm.principal.asset.hostname UDM field.
2025-11-24	- event.idm.read_only_udm.security_result.about.labels: Removed mapping of resolution_id, expected_action from event.idm.read_only_udm.security_result.about.labels UDM field since it is deprecated. - event.idm.read_only_udm.additional.fields: Mapped resolution_id, expected_action raw log fields to event.idm.read_only_udm.additional.fields UDM field. - Added conditional check for user_ou.
2022-04-13	Enhancement-Added mappings for following fields: sev to security_result.severity_details action to security_result.action_details dst to target.user.userid status_id to principal.labels usb_serial_number, encrypt, volume_serial_number to security_result.detection_fields fail_reason, evidence_count, total_count, total_size, class_count, class_display, count, to additional.fields