Change log for CA_ACCESS_CONTROL
Date | Changes |
---|---|
2023-07-25 | Bug-Fix -Removed use case-specific information from default parser.
|
2022-06-29 | Enhancement - Modified grok pattern to parse Update Event log types, shutdown logs and start logs. Mapped "timestamp" to "event.idm.read_only_udm.metadata.collected_timestamp" for SEAUDIT FORMAT Logs. Mapped "Userid" to "event.idm.read_only_udm.target.user.userid" for Update User, Update Group. Mapped "event.idm.read_only_udm.metadata.event_type" [User_Uncategorized for Update (User,File,Program,Hnode) and Group_Uncategorized for Update(Group)]. Mapped "about.labels" for Update Hnode log type with key as "policy_name". Mapped "event.idm.read_only_udm.target.resource.name" for Update Hnode Log Type. Mapped "event.idm.read_only_udm.target.process.command_line" for Update Events. Mapped "event.idm.read_only_udm.src.user.userid" with the raw field User Name. Mapped "event.idm.read_only_udm.security_result.rule_type" with command_type for "Security database administration" event type. |
2022-04-13 | Enhancement-Mapped the following fields: status, reason, stage, class, resource, access, event header, administrator, command, type, sequence number, daemon.
|