Stay organized with collections
Save and categorize content based on your preferences.
Change log for NETSCOUT_OCI
Date
Changes
2024-02-21
Enhancement:
- Added support for new version of Syslog CEF logs.
- Mapped "url" to "target.url".
- Mapped "app" to "target.application".
- When "src_iporhost" is a valid IP, then mapped it to "principal.ip" or else mapped it to "principal.hostname".
- Mapped "mitreTactic", "mitreTechnique", "srcCount", "dstCount", "srcHostGroupCount", "dstHostGroupCount", "interfaceCount", "violationCount", "dstHostGroup", and "srcHostGroup" to "security_result.detection_fields".
- Removed "desc" mapping to "security_result.description" as it is already being mapped to "metadata.description".
- Mapped "iocDescription" to "security_result.description".
- Mapped "Category" to "security_result.category_details".
- Mapped "Policy" and "Classification" to "additional.fields".
