Change log for CHRONICLE_SOAR_AUDIT
Date | Changes |
---|---|
2025-05-29 | - event.idm.read_only_udm.target.user.userid: Removed mapping of `user` from `event.idm.read_only_udm.target.user.userid` UDM field.
- event.idm.read_only_udm.principal.user.userid: Mapped `user` raw log field with `event.idm.read_only_udm.principal.user.userid` UDM field. - event.idm.read_only_udm.additional.fields: Newly mapped `Name` raw log field with `event.idm.read_only_udm.additional.fields` UDM field. - event.idm.read_only_udm.additional.fields: Newly mapped `ContactEmails` raw log field with `event.idm.read_only_udm.additional.fields` UDM field. - event.idm.read_only_udm.additional.fields: Newly mapped `ContactName` raw log field with `event.idm.read_only_udm.additional.fields` UDM field. - event.idm.read_only_udm.additional.fields: Newly mapped `ContactPhone` raw log field with `event.idm.read_only_udm.additional.fields` UDM field. |
2023-10-12 | Newly created parser. |