Stay organized with collections
Save and categorize content based on your preferences.
Change log for GCP_IAM_CONTEXT
Date
Changes
2024-03-13
- Additionally mapped "resource.data.email" to "entity.user.userid".
- Updated mappings of raw logs, "resource.data.oauth2ClientId" to "entity.user.attribute.labels" and "resource.data.uniqueId" to "entity.user.product_object_id" UDM fields.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-09-07 UTC."],[[["\u003cp\u003eThe GCP_IAM_CONTEXT parser was promoted to default status on July 26, 2023.\u003c/p\u003e\n"],["\u003cp\u003eOn March 13, 2024, the "resource.data.email" field was additionally mapped to "entity.user.userid".\u003c/p\u003e\n"],["\u003cp\u003eOn March 13, 2024, the mappings of "resource.data.oauth2ClientId" and "resource.data.uniqueId" to UDM fields were updated to "entity.user.attribute.labels" and "entity.user.product_object_id", respectively.\u003c/p\u003e\n"]]],[],null,["Change log for GCP_IAM_CONTEXT\n\n| Date | Changes |\n|------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|\n| 2024-03-13 | - Additionally mapped \"resource.data.email\" to \"entity.user.userid\". - Updated mappings of raw logs, \"resource.data.oauth2ClientId\" to \"entity.user.attribute.labels\" and \"resource.data.uniqueId\" to \"entity.user.product_object_id\" UDM fields. |\n| 2023-07-26 | Promoted \"GCP_IAM_CONTEXT\" parser to default. For the field mapping reference, see [Collect Google Cloud Identity and Access Management context logs](https://cloud.google.com/chronicle/docs/ingestion/cloud/context-parsers). |"]]
