flag(log): new flag format

[josedonizetti]

Changes:

• New flag format: Changed from --log level:debug to --log level=debug
• Structured filters: Changed from --log filter:msg=error to --log filter.include.msg=error
• Level field rename: Changed level: to lvl: in config for consistency
• Consistent syntax: All log options now use dot notation for hierarchy and equals for values
• Added constants: Defined all log flag constants for maintainability
• Updated parsing: Refactored PrepareLogger to handle new structured format
• Fixed bugs: Resolved issues with multiple filter options not being applied correctly

Examples:

Old flag format (deprecated):

--logging level:debug
--logging file:/tmp/tracee.log  
--logging aggregate:5s
--logging filter:msg=error,pkg=core
--logging filter-out:lvl=debug

New flag format:

--logging level=debug
--logging file=/tmp/tracee.log
--logging aggregate.enabled=true --log aggregate.flush-interval=5s
--logging filters.include.msg=error --log filters.include.pkg=core
--logging filters.exclude.lvl=debug

Old config format (deprecated):

logging:
  level: debug
  file: /tmp/tracee.log
  filters:
    msg: [foo, bar]
    level: [error]
  filter-out:
    level: [debug]

New config format:

logging:
  level: debug
  file: /tmp/tracee.log
  filters:
    include:
      msg:
        - foo
        - bar
      lvl:
        - error
    exclude:
      lvl:
        - debug

Testing: All existing tests updated + comprehensive test coverage for new format.

[codecov]

Codecov Report

❌ Patch coverage is 74.81203% with 67 lines in your changes missing coverage. Please review.
✅ Project coverage is 30.77%. Comparing base (034cbab) to head (4467f53).
⚠️ Report is 71 commits behind head on main.

Files with missing lines	Patch %	Lines
pkg/cmd/flags/logging.go	78.45%	41 Missing and 12 partials ⚠️
cmd/tracee/cmd/analyze.go	50.00%	4 Missing ⚠️
cmd/tracee/cmd/root.go	0.00%	4 Missing ⚠️
pkg/cmd/cobra/cobra.go	0.00%	3 Missing ⚠️
pkg/cmd/flags/errors.go	0.00%	2 Missing ⚠️
cmd/tracee/cmd/man.go	50.00%	1 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #4999      +/-   ##
==========================================
+ Coverage   29.72%   30.77%   +1.04%     
==========================================
  Files         234      235       +1     
  Lines       26186    26753     +567     
==========================================
+ Hits         7785     8232     +447     
- Misses      17864    17974     +110     
- Partials      537      547      +10     

Flag	Coverage Δ
unit	30.77% <74.81%> (+1.04%)	⬆️

Files with missing lines	Coverage Δ
pkg/cmd/flags/config.go	86.93% <100.00%> (+86.93%)	⬆️
cmd/tracee/cmd/man.go	40.95% <50.00%> (ø)
pkg/cmd/flags/errors.go	83.33% <0.00%> (-8.98%)	⬇️
pkg/cmd/cobra/cobra.go	0.00% <0.00%> (ø)
cmd/tracee/cmd/analyze.go	32.52% <50.00%> (ø)
cmd/tracee/cmd/root.go	0.00% <0.00%> (ø)
pkg/cmd/flags/logging.go	78.45% <78.45%> (ø)

... and 21 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[yanivagman]

Overall LGTM, but:

1. Looks like some commits should be squashed (currently 19 commits for this change, including commits like "fix PR review comments")
2. Why did we change level to lvl? Don't we want to be explicit with level?

[yanivagman]

LGTM

[josedonizetti]

The documentation error, is because the script doesn't consider renames log.md become logging.md, so it fails, but it is correct.

[geyslan]

LGTM. Put just some thoughts.