Change log for UBIKA_WAF

Date	Changes
2025-11-02	Enhancement: - `event.idm.read_only_udm.additional.fields`: Newly mapped `http_host_header` raw log fields to `event.idm.read_only_udm.additional.fields`. - `event.idm.read_only_udm.target.resource.attribute.labels`: Newly mapped `eventData.eventUid`, `eventData.tokens.severity`, `eventData.tokens.date`, `eventData.tokens.eventType`, `eventData.tokens.attackFamily`, `eventData.tokens.reason`, `eventData.tokens.customMessage` raw log fields to `event.idm.read_only_udm.target.resource.attribute.labels`. - `event.idm.read_only_udm.metadata.product_event_type`: Changed mapping for `event.idm.read_only_udm.metadata.product_event_type` from `tokens.eventType` to `eventData.tokens.eventType`. - `event.idm.read_only_udm.intermediary.hostname`: Newly mapped `inter_host` to `event.idm.read_only_udm.intermediary.hostname`. - Added grok pattern to parse new pattern of SYSLOG logs.
2025-10-03	Enhancement: - `event.idm.read_only_udm.principal.hostname`: Newly mapped `src_host` raw log field to `event.idm.read_only_udm.principal.hostname` UDM field. - `event.idm.read_only_udm.intermediary.hostname`: Newly mapped `inter_host` raw log field to `event.idm.read_only_udm.intermediary.hostname` UDM field. - `event.idm.read_only_udm.principal.application`: Newly mapped `src_app` raw log field to `event.idm.read_only_udm.principal.application` UDM field. - `event.idm.read_only_udm.target.ip`: Newly mapped `tar_ip`, `target_ip` from `tokens.reason` raw log field(s) to `event.idm.read_only_udm.target.ip` UDM field. - `event.idm.read_only_udm.target.asset.ip`: Newly mapped `tar_ip`, `target_ip` from `tokens.reason` raw log field(s) to `event.idm.read_only_udm.target.asset.ip` UDM field. - `event.idm.read_only_udm.additional.fields`: Newly mapped `request.query` ,`header.value`, `eventData.tokens.icxPolicyName`, `eventData.tokens.icxPolicyUid`, `eventData.tokens.icxRuleName`, `eventData.tokens.icxRuleUid`, `eventData.tokens.securityExceptionConfigurationUids`, `matchingPart.part`, `matchingPart.partKey`, `matchingPart.partKeyOperator`, `matchingPart.partKeyPattern`, `matchingPart.partKeyMatch`, `matchingPart.partValue`, `matchingPart.partValueOperator`, `matchingPart.partValuePatternUid`, `matchingPart.partValuePatternName`, `matchingPart.partValuePatternVersion`, `matchingPart.partValueMatch`, `matchingPart.attackFamily`, `matchingPart.riskLevel`, `matchingPart.riskLevelOWASP`, `matchingPart.cwe` to `event.idm.read_only_udm.additional.fields` UDM field. - Added groks to parse new pattern of SYSLOG logs. - Set the event_type to `NETWORK_CONNECTION` when both `has_principal` and `has_target` are `true`. - Corrected typos in internal field names (e.g., `eventt.tokens.riskLevel` to `tokens.riskLevel`).
2024-08-23	Enhancement: - Added a new Grok pattern to parse a new format of SYSLOG logs.
2024-07-23	Enhancement: - Added "eventIndex" to resolve the flakiness in the parser. - Added a new Grok pattern to parse a new format of SYSLOG logs.
2024-06-13	- Newly created parser.