Change log for GITLAB
Date | Changes |
---|---|
2024-04-08 | Enhancement:
- Mapped "custom_message.action" to "security_result.summary". - Mapped "ip_address" to "principal.ip". - Mapped "applicationProtocol" to "network.application_protocol". - Mapped "details.author_name"" to "principal.user.email_addresses" - Mapped "author_id" to "principal.user.userid". - Mapped "target_id" to "target.resource.id". - Mapped "details.entity_path" to "target.file.full_path". - Mapped "event_type" to "product_event_type". - Mapped "target_type", "entity_type" and "target_details" to "resource.attribute.labels". |
2023-10-20 | - Mapped the fields starting with "db_" to "additional_fields".
- Mapped the fields starting with "redis_" to "additional_fields". - Mapped "severity" or "jsonPayload.severity" to "security_result.severity" when the value is either "ERROR" or "NOTICE". - Mapped "jsonPayload.correlation_id" to "principal.asset_id". - Mapped "unmapped fields of jsonPayload" to "additional_fields". - Mapped "jsonPayload.worker_id" to "principal.application". - Mapped "jsonPayload.method" to "network.http.method". - Mapped "jsonPayload.pid" to "target.process.pid". - Mapped "jsonPayload.status" to "network.http.response_code". - Mapped "resource.labels.zone" to "target.cloud.availability_zone". - Mapped "resource.type" to "target.cloud.environment". - Mapped "jsonPayload.meta_user" to "target.user.userid". - Mapped "jsonPayload.username" to "principal.user.userid". - Mapped "jsonPayload.remote_ip" to "principal.ip". - Mapped "jsonPayload.ua" to "network.http.user_agent". - Mapped "jsonPayload.meta_client_id" to "target.user.userid". - Mapped "jsonPayload.path" to "target.process.file.full_path". - Mapped "protoPayload.authenticationInfo.principalEmail" to "principal.user.email_addresses". - Mapped additional fields in "protoPayload" to "additional.fields". - Provided a conditional check that required mapping is present before mapping the "metadata.event_type". |
2023-10-10 | - Mapped "jsonPayload.details.as" to "principal.resource.attribute.labels" and "principal.user.role_name".
- Set "principal_role.type" to "ADMINISTRATOR" for logs having "jsonPayload.details.as" equals to "Owner". - Set "principal_role.type" to "SERVICE_ACCOUNT" for logs having "jsonPayload.details.as" set to either "Developer", "Maintainer", or "Reporter". - Set "principal_role.type" to "TYPE_UNSPECIFIED" for logs having "jsonPayload.details.as" equals to "Guest". - Mapped "jsonPayload.details.add" to "principal.resource.attribute.labels". - Mapped "jsonPayload.entity_type" to "target.resource.attribute.labels". |
2023-08-31 | - Newly created parser.
|