Change log for ATLASSIAN_CONFLUENCE
| Date | Changes |
|---|---|
| 2024-07-05 |
Enhancement : - Added support for a new format of syslog logs. |
| 2023-11-14 |
Enhancement : - Added Grok pattern to match SYSLOG + JSON.- Mapped affectedObjects.id, affectedObjects.name, affectedObjects.type to principal.resource.attribute.labels when affectedObjects.type value is not user.- Mapped affectedObjects.id to principal.user.userid when affectedObjects.type is user.- Mapped affectedObjects.name to principal.user.user_display_name when affectedObjects.type value is user.- Mapped auditType.category to security_result.category_details.- Mapped auditType.action to security_result.summary when auditType.area value is SECURITY.- Mapped auditType.action, auditType.actionI18nKey, auditType.area, auditType.categoryI18nKey and auditType.level, to security_result.detection_fields when auditType.area value is not SECURITY.- Mapped author.id to principal.user.userid when author.type value is user.- Mapped author.name to principal.user.user_display_name when author.type value is user.- Mapped changedValues.from, changedValues.i18nKey, changedValues.key and changedValues.to to principal.resource.attribute.labels.- Mapped extraAttributes.name, extraAttributes.nameI18nKey and extraAttributes.value to principal.resource.attribute.labels.- Mapped source to principal.ip.- Mapped system to principal.hostname.
|
| 2023-10-24 |
Bug-Fix : - Mapped session_duration to additional fields.- Mapped bytes_in to network.received_bytes.- Mapped app_protocol to network.application_protocol.
|
| 2023-08-28 |
Bug-Fix : - Mapped principal_host to principal.hostname.- Modified mapping of user_id from prinicipal.hostname to principal.user.userid.
|
| 2023-04-28 |
Enhacement : - Wrote new Grok pattern to parse additional logs as GENERIC_EVENT event type.
|
| 2023-04-03 |
Bug-Fix : - Changed the order of date formats while mapping the timestamp. - Mapped category to security_result.category_details.
|
| 2023-02-16 |
Enhancement: - Handled JSON logtype. |