add field based rules support in correlation engine

[sbcd90]

Description

add field based rules support in correlation engine
2.9 manual backport of pr #737

Issues Resolved

[List any issues this PR will resolve]

Check List

• New functionality includes testing.
  • All tests pass
• New functionality has been documented.
  • New functionality has javadoc added
• Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

[codecov]

Codecov Report

Attention: 71 lines in your changes are missing coverage. Please review.

Comparison is base (a941222) 25.85% compared to head (de7e8d4) 25.75%.

Files	Patch %	Lines
...arch/securityanalytics/correlation/JoinEngine.java	0.00%	43 Missing ⚠️
...arch/securityanalytics/model/CorrelationQuery.java	0.00%	15 Missing ⚠️
...earch/securityanalytics/model/CorrelationRule.java	0.00%	13 Missing ⚠️

Additional details and impacted files

@@             Coverage Diff              @@
##                2.9     #740      +/-   ##
============================================
- Coverage     25.85%   25.75%   -0.11%     
  Complexity      940      940              
============================================
  Files           252      252              
  Lines         10753    10796      +43     
  Branches       1198     1209      +11     
============================================
  Hits           2780     2780              
- Misses         7726     7769      +43     
  Partials        247      247              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.