[Servicenow] Add support to append sysparm query in CEL input

[moxarth-rathod]

Proposed commit message

Introduce an optional parameter to append additional query conditions
for advanced filtering needs. It is advised to avoid using timestamp
fields in the appended query to prevent potential issues with pagination and
cursor logic.

Checklist

• I have reviewed tips for building integrations and this pull request is aligned with them.
• I have verified that all data streams collect metrics or logs.
• I have added an entry to my package's changelog.yml file.
• I have verified that Kibana version constraints are current according to guidelines.
• I have verified that any added dashboard complies with Kibana's Dashboard good practices

How to test this PR locally

• Clone integrations repo.
• Install elastic package locally.
• Start elastic stack using elastic-package.
• Move to integrations/packages/servicenow directory.
• Run the following command to run tests.

elastic-package test

Related issues

• Closes [servicenow]: User-supplied sysparm_query #13413

[elasticmachine]

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

[elastic-vault-github-plugin-prod]

🚀 Benchmarks report

To see the full report comment with /test benchmark fullreport

[ShourieG]

Approving to unblock, but I still feel we should handle the trailing tokens in a more graceful manner. Having dead tokens as a suffix does not seem right, even if the API handles it.

[elastic-sonarqube]

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
100.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube

[elasticmachine]

💚 Build Succeeded

• Buildkite Build
• Commit: e939c45

History

• 💚 Build #25070 succeeded 6729052
• 💚 Build #24953 succeeded 086a518
• 💚 Build #24922 succeeded 0a2b2cf

cc @moxarth-rathod

[ShourieG]

LGTM

[elastic-vault-github-plugin-prod]

Package servicenow - 0.13.0 containing this change is available at https://epr.elastic.co/package/servicenow/0.13.0/