[cisco_ftd] Fixed grok errors on ftd message ID 305006. Added additional matching patterns per specification.

aleksmaus commented 2 days ago

Proposed commit message

Fixed grok errors on ftd message ID 305006. Added additional matching patterns per specification.

Matched the official message spec for 305006 https://www.cisco.com/c/en/us/td/docs/security/firepower/Syslogs/b_fptd_syslog_guide/syslogs3.html#:~:text=Action%20None%20required.-,305006,-Error%20Message%20%25

%FTD-3-305006: {outbound static|identity|portmap|regular) translation creation failed for protocol src interface_name:source_address/source_port [(idfw_user )] dst interface_name:dest_address/dest_port [(idfw_user )]

Added matching for the source and destination ports
Added matching for the source and destination user
Added bunch of permutations based on the same log and the message specification document.

Checklist

[x] I have reviewed tips for building integrations and this pull request is aligned with them.
[x] I have verified that all data streams collect metrics or logs.
[x] I have added an entry to my package's changelog.yml file.
[x] I have verified that Kibana version constraints are current according to guidelines.
[x] I have verified that any added dashboard complies with Kibana's Dashboard good practices