Change log for AZURE_APP_SERVICE
Date | Changes |
---|---|
2024-10-18 | Enhancement:
- Mapped "properties.XForwardedHost" to "principal.hostname" and "principal.asset.hostname". - Mapped "properties_category" to "additional.fields". - Mapped "properties.roleInstance" to "principal.resource.product_object_id". - Mapped "properties.message" to "security_result.summary". |
2024-09-30 | Enhancement:
- Added support to parse the new format of unparsed JSON logs. |
2024-06-24 | Enhancement:
- Mapped "metadata.product_name" and "metadata.vendor_name" to "AZURE_APP_SERVICE". |
2024-06-07 | Enhancement:
- Added support for JSON logs, when they are not in an array format. - Mapped "properties.ScSubStatus" to "additional.fields". - Mapped "properties.ScWin32Status" to "additional.fields". |
2024-04-25 | Enhancement:
- Mapped "properties.User" to "principal.user.userid". - Mapped "properties.UserDisplayName" to "principal.user.user_display_name". - Mapped "properties.UserAddress" to "principal.ip". - Mapped "properties.Protocol", "ClientBrowser", "ClientModel", "ClientOS", "OperationId", "ParentId", and "ItemCount" to "additional.fields". - Mapped "CsUriQuery", "SDKVersion", and "Cookie" to "principal.resource.attribute.labels". - Mapped "SessionId" to "network.session_id". - Mapped "Message" to "security_result.summary". - Mapped "SeverityLevel" to "security_result.severity_details". |
2024-02-20 | Enhancement:
- Mapped "record.AppRoleInstance" to "principal.resource.product_object_id". - Mapped "record.AppRoleName" to "principal.resource.name". - Mapped "record.ClientCity" to "principal.location.city". - Mapped "record.ClientCountryOrRegion" to "principal.location.country_or_region". - Mapped "record.ClientStateOrProvince" to "principal.location.state". - Mapped "record.ClientIP" to "principal.ip". - Mapped "Result" to "security_result.summary". - Mapped "UserAgent" to "network.http.user_agent". - Mapped "Referer" to "network.http.referral_url". - Mapped "record.ResourceGUID" to "target.resource.product_object_id". - If "record.ResourceGUID" is not present, then mapped "record.resourceId" to "target.resource.product_object_id". - If "record.ResourceGUID" is present, then mapped "record.resourceId" to "additional.fields". - Mapped "record.Type" to "additional.fields". - Mapped "record.ClientType" to "additional.fields". - Mapped "record.SDKVersion" to "additional.fields". - Mapped "record.Name" to "additional.fields". - Mapped "record.Instance" to "additional.fields". - Mapped "record.TimeTaken" to "additional.fields". - Mapped "record.Cookie" to "additional.fields". - Mapped "record.AppVersion" to "principal.resource.attribute.labels". - Mapped "record.IKey" to "target.resource.attribute.labels". - Mapped "record.Category" to "metadata.product_event_type". - Mapped "CsUriStem" to "target.url". - Changed mapping of "CsBytes" from "network.received_bytes" to "network.sent_bytes". - Changed mapping of "ScBytes" from "network.sent_bytes" to "network.received_bytes". |
2023-12-07 | - Newly created parser.
|