FEATURE: Add new dashboards for community_id and firewall auth

[dougburks]

After Firewall dashboard, add a new Firewall Authentication dashboard:

observer.type:firewall AND event.category:authentication | groupby user.name | groupby -sankey user.name source.ip | groupby source.ip | table soc_timestamp user.name source.ip message

Rename Connections dashboard to Connections seen by Zeek or Suricata and then create a new dashboard called Connections and Metadata with community_id that shows ALL logs with community_id:

_exists_:network.community_id | groupby event.module* | groupby -sankey event.module* event.dataset | groupby event.dataset | groupby source.ip source.port destination.ip destination.port | groupby network.protocol | groupby source_geo.organization_name source.geo.country_name | groupby destination_geo.organization_name destination.geo.country_name | groupby rule.name rule.category event.severity_label | groupby dns.query.name | groupby http.virtual_host http.uri | groupby notice.note notice.message notice.sub_message | groupby source.ip host.hostname user.name event.action event.type process.executable process.pid

[dougburks]

Verified: