filebeat/module/mysql: add authentication message parsing and related.ip & related.user fields

[leweafan]

What does this PR do?

Adds new patterns, authentication message parsing and related.ip & related.user fields

Why is it important?

Parsing should be ECS compliant and authentication messages important for SIEM

Checklist

• My code follows the style guidelines of this project
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation
• I have made corresponding change to the default configuration files
• I have added tests that prove my fix is effective or that my feature works
• I have added an entry in CHANGELOG.next.asciidoc or CHANGELOG-developer.next.asciidoc.

Author's Checklist

• [ ]

How to test this PR locally

Related issues

• Closes Filebeat MySQL slowlog module - user.name exists and related.user field missing #34634
• Closes Filebeat MySQL ingest pipeline can't parse authentication messages for SIEM #32231

Use cases

Screenshots

Logs

[botelastic]

This pull request doesn't have a Team:<team> label.

[mergify]

This pull request does not have a backport label.
If this is a bug or security fix, could you label this PR @leweafan? 🙏.
For such, you'll need to label your PR with:

• The upcoming major version of the Elastic Stack
• The upcoming minor version of the Elastic Stack (if you're not pushing a breaking change)

To fixup this pull request, you need to add the backport labels for the needed
branches, such as:

• backport-v8./d.0 is the label to automatically backport to the 8./d branch. /d is the digit

[elasticmachine]

💚 Build Succeeded

the below badges are clickable and redirect to their specific view in the CI or DOCS

Expand to view the summary

Build stats

• Start Time: 2023-03-28T23:35:18.512+0000

• Duration: 73 min 40 sec

Test stats 🧪

Test	Results
Failed	0
Passed	7585
Skipped	747
Total	8332

💚 Flaky test report

Tests succeeded.

🤖 GitHub comments

Expand to view the GitHub comments

To re-run your PR in the CI, just comment with:

• /test : Re-trigger the build.

• /package : Generate the packages and run the E2E tests.

• /beats-tester : Run the installation tests with beats-tester.

• run elasticsearch-ci/docs : Re-trigger the docs validation. (use unformatted text in the comment!)

[efd6]

/test

[mergify]

This pull request is now in conflicts. Could you fix it? 🙏
To fixup this pull request, you can check out it locally. See documentation: https://help.github.com/articles/checking-out-pull-requests-locally/

git fetch upstream
git checkout -b mysql_new upstream/mysql_new
git merge upstream/main
git push upstream mysql_new

[leweafan]

Can any one help with review?

[leweafan]

@tetianakravchenko can I ask you to help with this one too?

[efd6]

Please also resolve the merge conflict.

[efd6]

/test

[efd6]

Thanks