Change log for APPOMNI

Date	Changes
2025-01-07	Enhancement: - Mapped "event.ueba.normal_state.authentication.raw_method.counts", "event.ueba.normal_state.authentication.raw_method.results", "event.ueba.normal_state.source.as.organization.name.results", "event.ueba.normal_state.source.as.organization.name.counts", "event.ueba.rare_state.authentication.raw_method.counts", "event.ueba.rare_state.authentication.raw_method.results", "event.ueba.rare_state.source.as.organization.name.results", and "event.ueba.rare_state.source.as.organization.name.counts" to "additional.fields". - Mapped "event.ueba.anomalous_fields.source.as.organization.name" to "principal.network.organization_name".
2024-12-17	Enhancement: - Mapped "indicators" to "additional.fields".
2024-11-27	Enhancement - Changed the mappings from "about.labels" to "additional.fields".
2023-08-23	Enhanced existing parser.
2023-06-12	Enhancement - Mapped "resource.metadata.application" to "target.application". - Mapped "resource.metadata.entities" to "target.resource.attribute.labels". - Mapped "resource.metadata.query" to "target.process.command_line". - Mapped "resource.metadata.row_count" to "target.resource.attribute.labels". - Mapped "resource.metadata.type" to "target.resource.attribute.labels". - Mapped "resource.metadata.action_message" to "security_results.action_details". - Mapped "resource.metadata.language" to "security_results.about.label". - Mapped "labels.user_location" to "principal.asset.location.name". - Mapped "labels.login_key" to "principal.resource.attribute.labels". - Mapped "user.email" to "principal.user.email_addresses". - Mapped "user.full_name" to "principal.user.user_display_name". - Mapped "user.hash" to "principal.resource.attribute.labels". - Mapped "user.id" to "principal.user.userid". - Mapped "user.roles" to "principal.resource.attribute.labels". - Mapped "user_agent.original" to "network.http.user_agent". - Mapped "host.os.name" to "target.asset.platform_software.platform". - Mapped "host.os.version" to "target.asset.platform_software.platform_version". - Mapped "http.request.method" to "network.http.method". - Mapped "source.ip" to "principal.ip".
2023-04-25	Newly created parser.