BuildFilterMap parses the provided filter strings and returns a map of field name to SQL filters.

ExtractNamedGroupsFromGrok extracts named groups from a Grok pattern.

GetGranularityFromFileLayout is a helper function to determine the granularity of the collection state based on the file layout the 'granularity' means what it the shortest period we can determine that an artifact comes from based on its filename e.g., if the filename contains {year}/{month}/{day}/{hour}/{minute}, the granularity is 1 minute if the filename contains {year}/{month}/{day}/{hour}, the granularity is 1 hour NOTE: we traverse the time properties from largest to smallest.