Change log for AKAMAI_EAA
| Date | Changes |
|---|---|
| 2025-07-15 |
Enhancement: - event.idm.read_only_udm.metadata.id: Newly mapped eventId raw log field to event.idm.read_only_udm.metadata.id.- event.idm.read_only_udm.metadata.event_timestamp: Newly mapped eventTime raw log field to event.idm.read_only_udm.metadata.event_timestamp.- event.idm.read_only_udm.principal.user.company_name: Newly mapped ACCOUNT_NAME raw log field to event.idm.read_only_udm.principal.user.company_name.- event.idm.read_only_udm.target.application: Newly mapped APPLICATION and method raw log fields to event.idm.read_only_udm.target.application.- event.idm.read_only_udm.target.resource.attribute.labels: Newly mapped ACCOUNT_STATUS and PROPERTY_VERSION raw log fields to event.idm.read_only_udm.target.resource.attribute.labels.- event.idm.read_only_udm.principal.user.userid: Newly mapped USERNAME raw log field to event.idm.read_only_udm.principal.user.userid.- event.idm.read_only_udm.target.asset.asset_id: Newly mapped ASSET_ID raw log field to event.idm.read_only_udm.target.asset.asset_id.- event.idm.read_only_udm.target.resource.name: Newly mapped PROPERTY_NAME raw log field to event.idm.read_only_udm.target.resource.name.- event.idm.read_only_udm.intermediary.ip: Newly mapped pulsar_host raw log field to event.idm.read_only_udm.intermediary.ip.- event.idm.read_only_udm.intermediary.hostname: Newly mapped pulsar_host raw log field to event.idm.read_only_udm.intermediary.hostname.- event.idm.read_only_udm.extensions.auth.auth_details: Newly mapped authenticationMethod raw log field to event.idm.read_only_udm.extensions.auth.auth_details.- event.idm.read_only_udm.target.hostname: Newly mapped domain raw log field to event.idm.read_only_udm.target.hostname and event.idm.read_only_udm.target.asset.hostname.- event.idm.read_only_udm.security_result.last_discovered_time: Newly mapped notOnOrAfter raw log field to event.idm.read_only_udm.security_result.last_discovered_time.- event.idm.read_only_udm.security_result.about.labels: Newly mapped entityId raw log field to event.idm.read_only_udm.security_result.about.labels.- event.idm.read_only_udm.metadata.description: Newly mapped eventType.eventDefinition.eventDescription raw log fields to event.idm.read_only_udm.metadata.description.- event.idm.read_only_udm.security_result.description: Newly mapped details raw log field to event.idm.read_only_udm.security_result.description.- event.idm.read_only_udm.security_result.first_discovered_time: Newly mapped notBefore raw log field to event.idm.read_only_udm.security_result.first_discovered_time.- event.idm.read_only_udm.metadata.collected_timestamp: Newly mapped arrivalDate raw log field to event.idm.read_only_udm.metadata.collected_timestamp.- event.idm.read_only_udm.metadata.product_log_id: Newly mapped eventType.eventTypeId raw log field to event.idm.read_only_udm.metadata.product_log_id.- event.idm.read_only_udm.metadata.product_event_type: Newly mapped eventType.eventTypeName raw log field to event.idm.read_only_udm.metadata.product_event_type.- event.idm.read_only_udm.principal.user.email_addresses: Newly mapped username raw log field to event.idm.read_only_udm.principal.user.email_addresses.- event.idm.read_only_udm.additional.fields: Newly mapped IS_INTERNAL_USER, IS_ON_HOME_ACCOUNT, CONTRACT_TYPE_ID, requestId, eventType.eventDefinition.eventDefinitionId, eventType.eventDefinition.eventName and impersonator raw log fields to event.idm.read_only_udm.additional.fields.
|
| 2025-01-09 |
Enhancement: - Converted error_code to string.
|
| 2023-11-14 |
Enhancement: - Mapped username, client_ip, device_type, cloud_zone, client_version, geo_city, geo_state, geo_country, resource, groups, and event to principal.user.user_display_name, principal.ip, principal.platform_version, principal.cloud.availability_zone, metadata.product_version, principal.location.city, principal.location.state, principal.location.country_or_region, principal.resource.attribute.labels, principal.user.group_identifiers and metadata.description respectively.- Mapped http_method, protocol, app_version, referer, status_code, user_agent, session_id, bytes_out, and bytes_in to network.http_method, network.application_protocol, network.application_protocol_version, network.referral_url, network.http.response_code, network.http.user_agent, network.session_id, network.sent_bytes, and network.recieved_bytes respectively.- Mapped resource, url_path, and apphost to target.resource.id, target.url, and target.hostname respectively.- Mapped resp_time, conn_resp_time, and origin_resp_time to security_result.detection_fields.- Mapped con_ip, con_srcport, deny_reason, and con_uuid to intermediary.ip, intermediary.port, security_result.summary, and intermediary.resource.product_object_id respectively.- Mapped error_code, idpinfo, origin_host, content_type, internal_host, session_info, and client_id to additional.fields.
|
| 2023-08-31 | - Newly created parser. |