Cherry-pick #17964 to 7.x: [Filebeat] Fix Cisco ASA 3020** and 106023 messages

[sayden]

Cherry-pick of PR #17964 to 7.x branch. Original message:

What does this PR do?

Messages of type 3020** and 106023 are sometimes formatted in a different way. This PR parses all found cases.

Checklist

• My code follows the style guidelines of this project
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation
• I have made corresponding change to the default configuration files
• I have added tests that prove my fix is effective or that my feature works
• I have added an entry in CHANGELOG.next.asciidoc or CHANGELOG-developer.next.asciidoc.

[elasticmachine]

Pinging @elastic/siem (Team:SIEM)

[elasticmachine]

Pinging @elastic/integrations-services (Team:Services)

[elasticmachine]

💚 Build Succeeded

Expand to view the summary

Build stats

• Build Cause: [Pull request #19237 updated]

• Start Time: 2020-07-01T14:35:09.716+0000

• Duration: 67 min 14 sec

Test stats 🧪

Test	Results
Failed	0
Passed	539
Skipped	128
Total	667

Steps errors

Expand to view the steps failures

• Name: Report to Codecov

  • Description: curl -sSLo codecov https://codecov.io/bash for i in auditbeat filebeat heartbeat libbeat metricbeat packetbeat winlogbeat journalbeat do FILE="${i}/build/coverage/full.cov" if [ -f "${FILE}" ]; then bash codecov -f "${FILE}" fi done

  • Duration: 1 min 27 sec

  • Start Time: 2020-07-01T15:38:06.562+0000

  • log