Change log for BEYONDTRUST_BEYONDINSIGHT
Date | Changes |
---|---|
2025-07-23 | Enhancement:
- Added gsubs to ensure proper mapping of KV format logs. - Modified a gsub to ensure proper mapping of `OS` and `Agent Version` raw log fields. - event.idm.read_only_udm.additional.fields: Newly mapped `EventType` raw log field to `event.idm.read_only_udm.additional.fields` (with key `Event Type`). - Added a grok pattern to check if `souirceip` is a valid IP address before mapping it to `event.idm.read_only_udm.principal.ip` UDM field. |
2025-05-13 | Enhancement:
- Added support to handle the '#' character in the UDM Fields. - Added support for the parsing the metadata.event_type. - Added support required null checks while doing the mapping. |
2025-04-21 | Enhancement:
- Added a grok pattern to support new format of SYSLOG logs. - Added gsub to fix the kv parsing issue. |
2025-02-06 | Enhancement:
- Added support to map the unparsed fields. |
2024-11-22 | - Newly created parser.
|