Updated parser version to 3.0.0 with enhanced field mapping and categorization

Improved ECS compliance with version 9.2.0 and CPS version 1.1.0

Enhanced event categorization with dynamic array-based event.category and event.type fields

Added comprehensive IP address validation using CIDR functions

Improved zbfw_classification_rules parsing with JSON structure support

Enhanced authentication failure detection and message parsing

Added client/server field mappings for non-flow events

Improved event outcome determination based on various conditions

Enhanced regex patterns for better log parsing accuracy

Added support for multiple authentication scenarios and connection events

Updated ECS version to 9.1.0

Improved timestamp parsing by removing timezone parameter for better compatibility

Adjusts the field mapping to comply with ECS: rename server.name to server.address , observer.address to observer.hostname , and process.id to process.pid .

Bumps ecs.version to 8.16.0.

Improves the field extraction and performance.

Bumps the minimum LogScale version to 1.142 to support assertions in yaml files.

Sets the Vendor.type field based on the event type.

Sets the observer.address , observer.name , event.outcome fields and more.

Renames the parser to paloalto-prisma-sdwan .

Adds new event.module and Cps.version fields

Removes the Product and related.ip fields

Sets following tags: Cps.version , Vendor , ecs.version , event.dataset , event.kind , event.module , event.outcome , observer.type