Create buffer in whodata syscheck to store audit logs

[jotacarma90]

Related issue	Documentation issue
#13920	wazuh/wazuh-documentation#5941

Description

Hi team, in this PR we are going to implement a queue in the syscheck module, to store the logs that we receive from the audit dispatcher.
In this way, we avoid blocking the same thread that receives those logs while we process them, as this is generating problems in the system when there is a large number of events.

I have created a separate thread that pulls logs from that queue and processes them.

Configuration options

<whodata>
    <queue_size>100000</queue_size>
</whodata>

Logs/Alerts example

• Info message setting the audit queue size:
  2023/02/23 11:39:52 wazuh-syscheckd: INFO: (6046): Internal audit queue size set to '16384'
• Warning when audit queue is full:
  2023/02/23 11:41:26 wazuh-syscheckd: WARNING: (6955): Internal audit queue is full. Some events may be lost. Next scheduled scan will recover lost data.

Tests

• Compilation without warnings in every supported platform
  • Linux
  • Windows
• Source installation
• Review logs syntax and correct language
• QA templates contemplate the added capabilities

• Memory tests for Linux
  • Scan-build report
  • Valgrind (memcheck and descriptor leaks check)
• Memory tests for Windows
  • Scan-build report

• Configuration on demand reports new parameters
• Added unit tests (for new features)

[chemamartinez]

LGTM!

[vikman90]

Wazuh CI / Unit tests: cmocka winagent

Cause:

• https://github.com/wazuh/wazuh-jenkins/issues/5698

The issue above is not related to the changes in this PR.