Stay organized with collections Save and categorize content based on your preferences.

Change log for SALESFORCE

Date Changes
2023-02-24 Enhancement-
- "security_result.action" mapped to ALLOW instead of BLOCK if the action is "LOGIN_NO_ERROR".
- For "Login" events :
- "action" mapped to "security_result.action".
- "target_user_name" mapped to "target.user.userid".
- "tls_protocol" mapped to "network.tls.version_protocol".
- "cipher_suite" mapped to "network.tls.cipher".
- Added "on_error" check for "OsVersion" and "date" block.
2022-12-13 Enhancement-
-Mapped "LoginType" to "security_result.description".
-Mapped "LoginUrl" to "principal.url".
-Added empty check for "ApiType" and "LoginGeo.City".
2022-09-02 Enhancement-
Migrated the custom parsers into default parser.
2022-07-04 Enhancement-
- Enhanced the parser to parse the logs having event_type 'LoginHistory'.
- Added condition to parse different formats of timestamp.
- Added condition for event_type 'USER_UNCATEGORIZED' where 'user_id' or 'UserId' or 'target_user_name' is not null.
- Added validation for parsing src_ip.
2022-04-18 Enhancement-Modified mapping for DOWNLOAD_FORMAT from 'metadata.ingestion_labels' to 'target.resource.attribute.labels'.
2022-03-30 Enhancement-Changed event_type for 'LoginEventStream' to USER_LOGIN.
Corrected mapping for the fields DOWNLOAD_FORMAT and ConnectedAppId.
Added mappings for certain fields when log is of type LoginEventStream, WaveDownload, ApiEventStream.