Change log for NETIQ_ACCESS_MANAGER

Date Changes
2025-04-24 Enhancement:
- `event.idm.read_only_udm.additional.fields`: Newly mapped `1` raw log field with `event.idm.read_only_udm.additional.fields` UDM field.
- `event.idm.read_only_udm.metadata.event_type`: Mapped `event.idm.read_only_udm.metadata.event_type` UDM field with `USER_LOGIN` if `I` raw log field is in `002E0505,002E001E,002E0046`.
- `event.idm.read_only_udm.security_result.action`: Mapped `event.idm.read_only_udm.security_result.action` UDM field with `BLOCK` if `I` raw log field is in `002E0505,002E001E,002E0046`.
- `event.idm.read_only_udm.extensions.auth.type`: Mapped `event.idm.read_only_udm.extensions.auth.type` UDM field with `AUTHTYPE_UNSPECIFIED` when `event.idm.read_only_udm.metadata.event_type` UDM field is `USER_LOGIN` or `USER_LOGOUT`.
- `event.idm.read_only_udm.metadata.event_type`: Mapped `event.idm.read_only_udm.metadata.event_type` UDM field with `NETWORK_UNCATEGORIZED` if `I` raw log field is `002E0525`.
- `event.idm.read_only_udm.security_result.action`: Mapped `event.idm.read_only_udm.security_result.action` UDM field with `ALLOW` if `I` raw log field is `002E0525,002E0045`.
- `event.idm.read_only_udm.metadata.event_type`: Mapped `event.idm.read_only_udm.metadata.event_type` UDM field with `USER_LOGOUT` if `I` raw log field is `002E0007,002E000C`.
- `event.idm.read_only_udm.metadata.event_type`: Mapped `event.idm.read_only_udm.metadata.event_type` UDM field with `USER_LOGIN` if `I` raw log field is `002E0045`.
- `event.idm.read_only_udm.principal.application`: Newly Mapped `appName` raw field with `event.idm.read_only_udm.principal.application` UDM field.
- `event.idm.read_only_udm.security_result.detection_fields`: Newly mapped `stringValue2` raw log field with `event.idm.read_only_udm.security_result.detection_fields` UDM field.
- `event.idm.read_only_udm.metadata.product_log_id`: Newly mapped `eventId` raw log field with `event.idm.read_only_udm.metadata.product_log_id` UDM field.
- `event.idm.read_only_udm.network.session_id`: Newly mapped `subTarget` raw log field with `event.idm.read_only_udm.network.session_id` UDM field.
- `event.idm.read_only_udm.principal.user.userid`: Newly mapped `stringValue1` raw log field with `event.idm.read_only_udm.principal.user.userid` UDM field.
- `event.idm.read_only_udm.metadata.description`: Newly mapped `stringValue3` raw log field with `event.idm.read_only_udm.metadata.description` UDM field.
- `event.idm.read_only_udm.principal.asset.hostname`: Newly mapped `originator` raw log field with `event.idm.read_only_udm.principal.asset.hostname` UDM field.
- `event.idm.read_only_udm.principal.hostname`: Newly mapped `originator` raw log field with `event.idm.read_only_udm.principal.hostname` UDM field.
- Added a grok pattern to support variation of log.
2025-03-18 Enhancement:
- Mapped "A" to "security_result.rule_id".
- Mapped "B" to "target.resource.id".
- Mapped "D" to "metadata.description".
- Mapped "F" to "principal.application".
- Mapped "G","H","M" and "V" to "security_result.detection_fields".
- Mapped "I" to "metadata.product_log_id".
- Mapped "L" to "event.idm.read_only_udm.network.session_id".
- Mapped "O" to "target.resource.name".
- Mapped "S" to "target.user.group_identifiers".
- Mapped "T" to "event.idm.read_only_udm.network.http.user_agent".
- Mapped "U" to "target.user.userid".
- Mapped "Y" to "target.url".
- Mapped "host_name" to "principal.hostname" and "principal.asset.hostname".
- Mapped "process_name" to "target.application".
- Added null checks for "product", "product_version" and "event_id".
2024-12-12 - Newly created parser.