add field based rules support in correlation engine

[sbcd90]

Description

add field based rules support in correlation engine
2.9 manual backport of pr #737

Issues Resolved

[List any issues this PR will resolve]

Check List

• New functionality includes testing.
  • All tests pass
• New functionality has been documented.
  • New functionality has javadoc added
• Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

[codecov]

Codecov Report

Attention: 71 lines in your changes are missing coverage. Please review.

Comparison is base (61909b2) 25.85% compared to head (5a9dffa) 25.73%.

Files	Patch %	Lines
...arch/securityanalytics/correlation/JoinEngine.java	0.00%	43 Missing ⚠️
...arch/securityanalytics/model/CorrelationQuery.java	0.00%	15 Missing ⚠️
...earch/securityanalytics/model/CorrelationRule.java	0.00%	13 Missing ⚠️

Additional details and impacted files

@@                   Coverage Diff                   @@
##             2.9-with-features     #754      +/-   ##
=======================================================
- Coverage                25.85%   25.73%   -0.13%     
+ Complexity                 940      939       -1     
=======================================================
  Files                      252      252              
  Lines                    10753    10796      +43     
  Branches                  1198     1209      +11     
=======================================================
- Hits                      2780     2778       -2     
- Misses                    7726     7770      +44     
- Partials                   247      248       +1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.