Filebeat module Fortinet-FortiManager - add ECS authentication fields for SIEM

[leweafan]

Describe the enhancement:

There are event.action = "auth-logon/auth-logout" in expected test files but ECS fields important for SIEM like
event.category missing and event.action should be renamed to be ECS compliant.

Successful authentication message should have fields:

• event.category = "authentication"
• event.action = "logged-in"
• event.outcome = "success"

Failed authentication message should have fields:

• event.category = "authentication"
• event.action = "logon-failed"
• event.outcome = "failure"

Describe a specific use case for the enhancement or feature:

[elasticmachine]

Pinging @elastic/security-external-integrations (Team:Security-External Integrations)

[elasticmachine]

Pinging @elastic/sec-deployment-and-devices (Team:Security-Deployment and Devices)

[taylor-swanson]

Closing issue as the Fortinet Fortimanager fileset was deprecated in 8.12.0.

We recommend moving to the Fortinet FortiManager Logs Elastic integration.