Change log for AKAMAI_EAA

Date Changes
2025-07-15 Enhancement:
- event.idm.read_only_udm.metadata.id: Newly mapped eventId raw log field to event.idm.read_only_udm.metadata.id.
- event.idm.read_only_udm.metadata.event_timestamp: Newly mapped eventTime raw log field to event.idm.read_only_udm.metadata.event_timestamp.
- event.idm.read_only_udm.principal.user.company_name: Newly mapped ACCOUNT_NAME raw log field to event.idm.read_only_udm.principal.user.company_name.
- event.idm.read_only_udm.target.application: Newly mapped APPLICATION and method raw log fields to event.idm.read_only_udm.target.application.
- event.idm.read_only_udm.target.resource.attribute.labels: Newly mapped ACCOUNT_STATUS and PROPERTY_VERSION raw log fields to event.idm.read_only_udm.target.resource.attribute.labels.
- event.idm.read_only_udm.principal.user.userid: Newly mapped USERNAME raw log field to event.idm.read_only_udm.principal.user.userid.
- event.idm.read_only_udm.target.asset.asset_id: Newly mapped ASSET_ID raw log field to event.idm.read_only_udm.target.asset.asset_id.
- event.idm.read_only_udm.target.resource.name: Newly mapped PROPERTY_NAME raw log field to event.idm.read_only_udm.target.resource.name.
- event.idm.read_only_udm.intermediary.ip: Newly mapped pulsar_host raw log field to event.idm.read_only_udm.intermediary.ip.
- event.idm.read_only_udm.intermediary.hostname: Newly mapped pulsar_host raw log field to event.idm.read_only_udm.intermediary.hostname.
- event.idm.read_only_udm.extensions.auth.auth_details: Newly mapped authenticationMethod raw log field to event.idm.read_only_udm.extensions.auth.auth_details.
- event.idm.read_only_udm.target.hostname: Newly mapped domain raw log field to event.idm.read_only_udm.target.hostname and event.idm.read_only_udm.target.asset.hostname.
- event.idm.read_only_udm.security_result.last_discovered_time: Newly mapped notOnOrAfter raw log field to event.idm.read_only_udm.security_result.last_discovered_time.
- event.idm.read_only_udm.security_result.about.labels: Newly mapped entityId raw log field to event.idm.read_only_udm.security_result.about.labels.
- event.idm.read_only_udm.metadata.description: Newly mapped eventType.eventDefinition.eventDescription raw log fields to event.idm.read_only_udm.metadata.description.
- event.idm.read_only_udm.security_result.description: Newly mapped details raw log field to event.idm.read_only_udm.security_result.description.
- event.idm.read_only_udm.security_result.first_discovered_time: Newly mapped notBefore raw log field to event.idm.read_only_udm.security_result.first_discovered_time.
- event.idm.read_only_udm.metadata.collected_timestamp: Newly mapped arrivalDate raw log field to event.idm.read_only_udm.metadata.collected_timestamp.
- event.idm.read_only_udm.metadata.product_log_id: Newly mapped eventType.eventTypeId raw log field to event.idm.read_only_udm.metadata.product_log_id.
- event.idm.read_only_udm.metadata.product_event_type: Newly mapped eventType.eventTypeName raw log field to event.idm.read_only_udm.metadata.product_event_type.
- event.idm.read_only_udm.principal.user.email_addresses: Newly mapped username raw log field to event.idm.read_only_udm.principal.user.email_addresses.
- event.idm.read_only_udm.additional.fields: Newly mapped IS_INTERNAL_USER, IS_ON_HOME_ACCOUNT, CONTRACT_TYPE_ID, requestId, eventType.eventDefinition.eventDefinitionId, eventType.eventDefinition.eventName and impersonator raw log fields to event.idm.read_only_udm.additional.fields.
2025-01-09 Enhancement:
- Converted error_code to string.
2023-11-14 Enhancement:
- Mapped username, client_ip, device_type, cloud_zone, client_version, geo_city, geo_state, geo_country, resource, groups, and event to principal.user.user_display_name, principal.ip, principal.platform_version, principal.cloud.availability_zone, metadata.product_version, principal.location.city, principal.location.state, principal.location.country_or_region, principal.resource.attribute.labels, principal.user.group_identifiers and metadata.description respectively.
- Mapped http_method, protocol, app_version, referer, status_code, user_agent, session_id, bytes_out, and bytes_in to network.http_method, network.application_protocol, network.application_protocol_version, network.referral_url, network.http.response_code, network.http.user_agent, network.session_id, network.sent_bytes, and network.recieved_bytes respectively.
- Mapped resource, url_path, and apphost to target.resource.id, target.url, and target.hostname respectively.
- Mapped resp_time, conn_resp_time, and origin_resp_time to security_result.detection_fields.
- Mapped con_ip, con_srcport, deny_reason, and con_uuid to intermediary.ip, intermediary.port, security_result.summary, and intermediary.resource.product_object_id respectively.
- Mapped error_code, idpinfo, origin_host, content_type, internal_host, session_info, and client_id to additional.fields.
2023-08-31 - Newly created parser.