Change log for CITRIX_STOREFRONT
| Date | Changes |
|---|---|
| 2025-02-12 | Enhancement:
- Added JSON support to new type of logs. - Mapped "EventTime" to "metadata.event_timestamp". - Mapped "Channel" to "security_result.about.resource.attribute.labels". - Mapped "Severity" to "security_result.severity". - Mapped "OpcodeValue","X-Citrix-Via","ThreadID","XCitrixGateway","Opcode","Keywords", "OpcodeValue" to "additional.fields". - Mapped "X-Citrix-Via-VIP" to "_target.ip" and "_target.asset.ip". - Mapped "Remoteadresse" to "taregt.ip" and "target.asset.ip". - Mapped "invalid_X-Forwarded-For" to "_principal.ip" and "_principal.asset.ip". - Mapped "Task" to "_target.resource.type". - Mapped "description" to "metadata.description". - Mapped "Hostname" to "_principal.hostname" and "_principal.asset.hostname". - Mapped "EventID" to "metadata.product_event_type". - Mapped "RecordNumber" to "metadata.product_log_id". - Mapped "SourceModuleName" to "target.resource.name". - Mapped "SourceModuleType" to "_principal.resource.attribute.labels". |
| 2022-07-22 | Enhancement:
- Mapped "Machine.AssociatedUserUPNs" to "target.group.email_addresses". |