logging

PagerDuty(https://www.pagerduty.com/) is widely used for on-call globally. We are welcome the contributions to support it as alarm notification channel.

Is your feature request related to a problem? Please describe.
CEF (Common Event Format) is a logging format used by some tools. Loki and promtail should have a built in parser for it so that I can extract CEF fields as labels.
CEF messages look something like:

CEF:0|Palo Alto Networks|Cortex XDR|Cortex XDR 2.4|X

Logstash information:

Please include the following information:

1. Logstash version: 7.16.3 (with unverified reports of similar behaviour on 7.15)

   Looking through our case history there were examples of this issue happening after upgrading to 7.15 and higher. The odd behavior is this appears to be intermittent in most cases, and the cases closed out without resolution. Confirmed

This happens occasionally when shutting down the server:

Exception in thread "http-worker-15" java.lang.NullPointerException: null value in entry: exception=null
        at com.google.common.collect.CollectPreconditions.checkEntryNotNull(CollectPreconditions.java:32)
        at com.google.common.collect.ImmutableMap.entryOf(ImmutableMap.java:176)
        at com.google.common.collect.I

The generic Windows audit log config lacks many event ids, e.g.

• registry events
• driver load service addition events, System/7045 and Security/4697
• likely others