Change log for XITING_XAMS

Date Changes
2024-09-26 Enhancement:
- Changed mapping for "sapClassName" from "security_result.description" to "security_result.category_details".
- Mapped "sapEventId" to "metadata.product_event_type".
- Mapped "duser" to "principal.user.userid".
- Mapped "cs3" to "target.user.userid".
- Mapped "suser" to "principal.user.userid".
- When "column5" is having "/XITING/SA_S_SAL_PROTOCOL" as value then mapped "Security Audit Log" as "metadata.product_name" and "SAP" as "metadata.vendor_name".
- Mapped "event_name_value" to "metadata.description".
- Changed mapping for "msg" from "metadata.description" to "security_result.description".
- Mapped "client" to "additional.fields".
2024-09-05 Enhancement:
- Mapped "sapTsUtc" to "metadata.event_timestamp".
- Mapped "sapClassName", "cs2" to "additional.fields".
- When "sapEventId" is "AU7", then mapped the following:
- "sapEventId" to "deviceEventClassID".
- Changed cs_4 label key to "Client".
- "column6" to "eventName".
- "cs3" as "Report" in "additional.fields".
- Changed cs_5 label key to "ParamC".
- Mapped "shost" to "principal.application".
- Mapped "suser" to "principal.user.user_display_name".
2024-08-12 Enhancement:
- Mapped "sourceAddress" to principal.ip.
- Mapped CEF header ip and host to intermediate.ip and intermediate.hostname respectively.
2024-03-13 - Updated mapping for raw fields "sapEventId", "devicePayloadId", "sapTsTime", and "sapTsDate".
- Updated parser with conditional mapping.