Change log for ONEIDENTITY_TPAM

Date Changes
2025-12-23 Enhancement:
- Added a new grok pattern to parse new format of logs.
- event.idm.read_only_udm.metadata.event_timestamp: Newly mapped `timestamp` raw log field with `event.idm.read_only_udm.metadata.event_timestamp` UDM field.
- event.idm.read_only_udm.additional.fields: Newly mapped `cn2`, `cn3` raw log fields with `event.idm.read_only_udm.additional.fields` UDM field.
- event.idm.read_only_udm.intermediary.ip and event.idm.read_only_udm.intermediary.hostname: Setting `event.idm.read_only_udm.intermediary.ip` UDM field if `intermediary_data` raw log field is `IP` else setting `intermediary_data` raw log field to `event.idm.read_only_udm.intermediary.hostname` UDM field.
2025-04-10 - event.idm.read_only_udm.metadata.product_event_type: Mapped "eventid" along with "logmsg" raw log fields with "event.idm.read_only_udm.metadata.product_event_type" UDM field.
- Added gsubs in order to handle "event.idm.read_only_udm.additional.fields" for new format of kv logs.
2025-03-11 - Mapped "logtype" to "metadata.vendor_name"
- Mapped "logmessage" to "metadata.product_name"
- Mapped "version" to "metadata.product_version"
- Mapped "logmsg" to "metadata.product_event_type"
- Mapped "hostname" to "principal.hostname" and "principal.asset.hostname"
- Mapped "groupName" to "principal.group.group_display_name"
- Mapped "duid" to "target.user.userid"
- Mapped "duser" to "target.user.user_display_name"
- Mapped "msg" to "metadata.description"
- Mapped "destinationDnsDomain" to "target.domain.name"
- Mapped "requestUrl" to "target.url"
- Mapped "reason" to "security_result.summary"
- Mapped "cn1" to "target.resource.product_object_id"
- Mapped "cs1" to "principal.user.attribute.roles"
- Mapped "cs2", "cs3", "cs4", "cs5", "cs6" to "additional.fields"
- Mapped "deviceCustomDate1" to "security_result.detection_fields"