Add windows event regex filtering to CWAgent

[Paamicky]

Description of the issue

The CloudWatch Agent currently filters Windows Event Logs based on security levels (i.e Error, Critical, Information...). This does not allow customers to collect specific and relevant logs to CloudWatch

This PR is draft; waiting on the event_id feature PR to be merged first.

Description of changes

• Add regex filtering to the CWAgent Windows logs collection
• Add rule for filtering validation
• Add new files for testing purposes

sample configuration of regex filtering

"logs": {
    "logs_collected": {
      "windows_events": {
        "collect_list": [
          {
            "event_name": "Application",
            "log_group_name": "{instance_id}",
            "log_stream_name": "ApplicationEvents",
            "filters": [
              {
                "type": "include",
                "expression": "Database.*failed|Authentication.*|login.*"
              }
            ]
          },
          {
            "event_name": "Application", 
            "log_group_name": "{instance_id}",
            "log_stream_name": "ApplicationEvents2",
            "filters": [
              {
                "type": "include",
                "expression": ".*user.*"
              },
              {
                "type": "exclude",
                "expression": ".*failed.*"
              }
            ]
          }
      }
    }
}

Caution

This PR has a testing PR linked to here:aws/amazon-cloudwatch-agent-test#555, merge this first.

License

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

Tests

• Added unit tests for regex validation and processing
• Manually tested on Windows servers to verify events are properly filtered by regex
• Verified backward compatibility with existing configurations.

Integration test showing Regex filtering passed for all Windows OS Regex Filtering

Requirements

Before commiting your code, please do the following steps.

1. Run make fmt and make fmt-sh
2. Run make lint

---

Integration Tests

To run integration tests against this PR, add the ready for testing label.