Sets the event.category and event.type to threat/indicator for events where an attack took place.

Sets the event.kind based on the attack name field.

Adds new event.module and Cps.version fields

Removes the Product, related.host and related.ip fields

Sets following tags: Cps.version, Vendor, ecs.version, event.dataset, event.kind, event.module, event.outcome, observer.type

Now Imperva CWAF logs can be pulled directly from AWS S3 bucket by LogScale

Bumps minimum LogScale version to 1.120 to support AWS S3 ingest feed