[Enhancement][Security Solution] - Improve host events panel

[michaelolo24]

Currently the Host Events panel (seen below) displays host information based on a set of given integrations.

Currently, the winlog information is based on the following query

    "winlog_module": {
      "filter": {
        "term": {
          "agent.type": "winlogbeat"
        }
      },
      "aggs": {
        "mwsysmon_operational_event_count": {
          "filter": {
            "term": {
              "winlog.channel": "Microsoft-Windows-Sysmon/Operational"
            }
          }
        },
        "security_event_count": {
          "filter": {
            "term": {
              "winlog.channel": "Security"
            }
          }
        }
      }
    }

A winlog input option has been added to filebeat to read windows logs data as documented here. The query here should be updated accordingly to account for host information that will be gathered via "agent.type": "filebeat".

[elasticmachine]

Pinging @elastic/security-threat-hunting-explore (Team:Threat Hunting:Explore)