Change log for ATLASSIAN_CONFLUENCE
| Date | Changes |
|---|---|
| 2023-11-14 | Enhancement :
- Added "Grok" pattern to match "SYSLOG" + "JSON". - Mapped "affectedObjects.id", "affectedObjects.name", "affectedObjects.type" to "principal.resource.attribute.labels" when "affectedObjects.type" value is not "user". - Mapped "affectedObjects.id" to "principal.user.userid" when "affectedObjects.type" is "user". - Mapped "affectedObjects.name" to "principal.user.user_display_name" when "affectedObjects.type" value is "user". - Mapped "auditType.category" to "security_result.category_details". - Mapped "auditType.action" to "security_result.summary" when "auditType.area" value is "SECURITY". - Mapped "auditType.action", "auditType.actionI18nKey", "auditType.area", "auditType.categoryI18nKey" and "auditType.level", to "security_result.detection_fields" when "auditType.area" value is not "SECURITY". - Mapped "author.id" to "principal.user.userid" when "author.type" value is "user". - Mapped "author.name" to "principal.user.user_display_name" when "author.type" value is "user". - Mapped "changedValues.from", "changedValues.i18nKey", "changedValues.key" and "changedValues.to" to "principal.resource.attribute.labels". - Mapped "extraAttributes.name", "extraAttributes.nameI18nKey" and "extraAttributes.value" to "principal.resource.attribute.labels". - Mapped "source" to "principal.ip". - Mapped "system" to "principal.hostname". |
| 2023-10-24 | Bug-Fix :
- Mapped "session_duration" to "additional fields". - Mapped "bytes_in" to "network.received_bytes". - Mapped "app_protocol" to "network.application_protocol". |
| 2023-08-28 | Bug-Fix :
- Mapped "principal_host" to "principal.hostname". - Modified mapping of "user_id" from "prinicipal.hostname" to "principal.user.userid". |
| 2023-04-28 | Enhacement :
- Wrote Grok pattern to parse additional logs as "GENERIC_EVENT" event type". |
| 2023-04-03 | Bug-Fix :
- Changed the order of date formats while mapping the timestamp. - Mapped 'category' to 'security_result.category_details'. |
| 2023-02-16 | Enhancement:
- Handled JSON logtype. |