[Forgerock] Add dashboard filter

[moxarth-rathod]

Proposed commit message

forgerock: add filter to populate the dashboard specific to Forgerock data

This PR has added a filter - `dataset.data_stream.dataset: forgerock.*` for the panel where the filter
was not present. Now, these panels will be populated with specific to Forgerock data.

Checklist

• I have reviewed tips for building integrations and this pull request is aligned with them.
• I have verified that all data streams collect metrics or logs.
• I have added an entry to my package's changelog.yml file.
• I have verified that Kibana version constraints are current according to guidelines.
• I have verified that any added dashboard complies with Kibana's Dashboard good practices

Related issues

• Closes forgerock: dashboard does not properly filter documents to be specific for ForgeRock data #14309

Screenshots

[elasticmachine]

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

[elastic-vault-github-plugin-prod]

🚀 Benchmarks report

To see the full report comment with /test benchmark fullreport

[elastic-sonarqube]

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
100.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube

[elasticmachine]

💚 Build Succeeded

• Buildkite Build
• Commit: f232124

cc @moxarth-rathod

[efd6]

@moxarth-rathod Can you provide screenshot for before and after the change that demonstrate the fix?

[moxarth-rathod]

@moxarth-rathod Can you provide screenshot for before and after the change that demonstrate the fix?

@efd6 there’s no visual change to the dashboard because filters are applied to individual panels rather than the entire dashboard.

[efd6]

What I was expecting would be looking at the forgerock dashboard assets that have been modified here when there are events that have come from other data streams and would be filtered out; before and after. We should see events in the dashboards in the before case and none in the after case.

[moxarth-rathod]

What I was expecting would be looking at the forgerock dashboard assets that have been modified here when there are events that have come from other data streams and would be filtered out; before and after. We should see events in the dashboards in the before case and none in the after case.

Sure, i've captured the screenshots with the data so you can see before/after changes in the panels. You can compare the first panel of before which includes the data of other data stream but got filtered out in after screenshot.

Before

After