[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-09-07 UTC."],[[["\u003cp\u003eTWINGATE's change log outlines enhancements and updates to its log parsing and mapping capabilities.\u003c/p\u003e\n"],["\u003cp\u003eRecent updates include mapping various "event_data" fields to more descriptive labels within "principal," "security_result," "metadata," and "target" categories.\u003c/p\u003e\n"],["\u003cp\u003eLogs can now be parsed using "gsub", allowing the ability to handle previously unparsed logs and data.\u003c/p\u003e\n"],["\u003cp\u003eUpdates in July focused on modifying field names for greater clarity, as seen by the change of "event_type" to "event_data_type", and also introduced mapping of previously unmapped fields.\u003c/p\u003e\n"],["\u003cp\u003eThe parser was newly created in May.\u003c/p\u003e\n"]]],[],null,["Change log for TWINGATE\n\n| Date | Changes |\n|------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|\n| 2024-12-11 | Enhancement: - Mapped \"event_data.actor.type\" to \"principal.user.attribute.roles\". - Mapped \"event_data.actor.id\" to \"principal.user.userid\". - Mapped \"event_data.actor.info.email\" to \"principal.user.emailaddresses\". - Mapped \"event_data.action\" to \"security_result.action_details\". - Mapped \"event_data.version\" to \"metadata.product_version\". - Mapped \"event_data.targets.id\" to \"target.resource.attribute.labels\". - Mapped \"event_data.targets.name\" to \"target.resource.attribute.labels\". - Mapped \"event_data.targets.type\" to \"target.resource.resource_type\". - Mapped \"event_data.targets.version\" to \"target.resource.attribute.labels\". - Mapped \"event_data.targets.email\" to \"target.resource.attribute.labels\". - Mapped \"event_data.targets.role\" to \"target.resource.attribute.labels\". - Mapped \"event_data.targets.address.value\" to \"target.ip\". - Mapped \"event_data.targets.address.value\" to \"target.asset.ip\". |\n| 2024-10-11 | Enhancement: - Added \"gsub\" to parse unparsed logs. - Mapped \"event.reasons.id\" to \"security_result.detection_fields\". - Mapped \"event.reasons.name\" to \"security_result.detection_fields\". - Mapped \"device.name\" to \"target.resource.attribute.labels\". |\n| 2024-07-30 | Enhancement: - Mapped connection_protocol to \"addition.fields\". - Changed \"event_type\" to \"event_data_type\". - Mapped the unmapped fields. |\n| 2024-05-23 | Newly created parser. |"]]
