Change log for GMAIL_LOGS

Date	Changes
2024-03-19	- Mapped "gmail.message_info.link_domain" to "about.labels". - Mapped "gmail.message_info.subject" to "network.email.subject". - Mapped "gmail.message_info.description" to "metadata.description". - Mapped "gmail.message_info.attachment.sha256" to "about.file.sha256". - Mapped "gmail.message_info.destination.address" to "network.email.to". - Mapped "gmail.message_info.rfc2822_message_id" to "network.email.mail_id". - Mapped "gmail.message_info.attachment.file_name" to "about.file.full_path". - Mapped "gmail.message_info.source.from_header_address" to "network.email.from". - Mapped "gmail.message_info.attachment.file_extension_type" to "about.file.mime_type". - Mapped "gmail.message_info.triggered_rule_info.rule_type" to "security_result.rule_id". - Mapped "gmail.message_info.triggered_rule_info.rule_name" to "security_result.rule_name". - When "gmail.event_info.success" is "true", then set "security_result.action" to "ALLOW". - When "gmail.event_info.success" is not "true", then set "security_result.action" to "BLOCK". - Mapped "gmail.message_info.source.from_header_displayname" to "principal.user.user_display_name". - Mapped "gmail.message_info.connection_info.smtp_response_reason" to "security_result.description". - Mapped "gmail.message_info.connection_info.ip_geo_country" to "principal.location.country_or_region". - When "gmail.message_info.source.address" is not a valid email, then mapped it to "principal.user.userid". - Mapped "gmail.message_info.source.service", "gmail.message_info.source.selector" to "principal.application". - When "_no_outcoming_message" is false, then mapped "gmail.message_info.payload_size" to "network.sent_bytes". - When "gmail.message_info.source.address" is a valid email, then mapped it to "principal.user.email_addresses". - When "_no_incoming_message" is false, then mapped "gmail.message_info.payload_size" to "network.received_bytes". - Mapped "il.message_info.connection_info.client_host_zone" to "principal.hostname" and "principal.asset.hostname". - Mapped "gmail.message_info.destination.0.service", "gmail.message_info.destination.0.selector" to "target.application". - Mapped "gmail.message_info.post_delivery_info.action_type", "gmail.message_info.num_message_attachments", and "gmail.event_info.mail_event_type" to "additional.fields".
2023-12-22	Bug-Fix: - Mapped "message_info.source.address" to "network.email.from".
2023-12-07	Bug-Fix: - Added convert block to convert the respective data to string. - Mapped "message_info.source.from_header_address" to "network.email.from".
2023-08-21	Enhancement: - Added null check for JSON plugin and dropped malformed logs. - Mapped 'email' to 'princpal.email_addresses'. - Mapped 'token.client_id' to 'principal.user.group_identifiers'. - Mapped 'token.app_name' to 'principal.application'. - Mapped 'token.scope_data.0.product_bucket.0' to 'additional.fields'. - Mapped 'record_type' to 'additional.fields'. - Mapped 'token.client_type' to 'additional.fields'. - Mapped 'event_name' to 'metadata.product_event_type'.
2023-06-06	Enhancement: - Mapped "event_info.success" to "security_result.action". - when "event_info.success" is "true" , "security_result.action" is set "ALLOW". - when "event_info.success" is "false" , "security_result.action" is set "BLOCK".
2023-05-19	Enhancement: - Mapped "attachment.file_name" to "about.file.full_path". - Mapped "message_info.post_delivery_info.action_type", "message_info.post_delivery_info.interaction.link_url", "event_info.mail_event_type" to "additional.fields".
2023-03-31	Enhancement: - The field 'message_info.source.service' and 'message_info.source.selector' is mapped to 'principal.application'. - The field 'message_info.destination.0.service' and 'message_info.destination.0.selector' is mapped to 'target.application'. - The field 'message_info.triggered_rule_info[n].string_match[n].predefined_detector_name' is mapped to 'security_result.detection_fields'. - The field 'message_info.triggered_rule_info[n].string_match[n].matched_string' is mapped to 'security_result.detection_fields'. - The field 'message_info.triggered_rule_info[n].string_match[n].match_expression' is mapped to 'security_result.detection_fields'. - The field 'message_info.triggered_rule_info[n].string_match[n].source' is mapped to 'security_result.detection_fields'. - The field 'message_info.triggered_rule_info[n].string_match[n].type' is mapped to 'security_result.detection_fields'. - The field 'message_info.num_message_attachments' is mapped to 'additional.fields'. - Added a 'for' loop to map the extracted fields from 'message_info.destination'. - Added a 'for' loop to map the extracted fields from 'message_info.attachment'. - Added null conditional checks for several fields.