[filebeat] improve cisco ASA module message patterns

[immon]

Describe the enhancement:

Filebeat's cisco ASA module does not parse messages of the following types:

unhandled messages ids

%ASA-7-609002
%ASA-6-302020
%ASA-6-302021
%ASA-6-302013
%ASA-6-302014
%ASA-4-313004
%ASA-6-305011
%ASA-6-305012
%ASA-6-302015
%ASA-6-302016
%ASA-2-106001
%ASA-4-106023
%ASA-1-106021
%ASA-2-106006
%ASA-6-106015
%ASA-6-302023
%ASA-6-302022
%ASA-7-111009
%ASA-6-106100
%ASA-7-609001 

We would like to extract at least destination.ip and source.ip fields.

Here are examples of messages not being parsed cisco_syslog.txt

[immon]

Similar issues #14978 #14034

[elasticmachine]

Pinging @elastic/siem (Team:SIEM)

[P1llus]

I am taking a look at this one, will update the issue with a status later on.

[Gimlie102]

Any update on this? These message types are frequently used and should definitely be supported.

[felix-lessoer]

@P1llus Any updates?

[P1llus]

I ended up doing a larger rewrite which tok longer time than anticipated. I see now that I should have rather done this change first. Give me a couple of days and I can post an update @felix-lessoer and @Gimlie102