[Filebeat] Add module for Forcepoint firewall logs

[andrewkroh]

Add a fileset for ingesting logs from Forcepoint Next Generation Firewall (NGFW). The firewall can export CEF data over syslog (among other formats). So the fileset should be able to leverage the syslog input and the decode_cef processor to ingest the logs and then in a module apply the appropriate transformations to match ECS as much as possible.

• Forcepoint: How to forward SMC log and audit data to external syslog or SIEM servers

[elasticmachine]

Pinging @elastic/siem (Team:SIEM)