We've reorganized our documentation navigation structure to align directly with your operational workflows. See the release notes and the walkthrough video for more information.

Change log for CITRIX_STOREFRONT

Date Changes

2025-02-12 Enhancement:
- Added JSON support to new type of logs.
- Mapped EventTime to metadata.event_timestamp.
- Mapped Channel to security_result.about.resource.attribute.labels.
- Mapped Severity to security_result.severity.
- Mapped OpcodeValue,X-Citrix-Via,ThreadID,XCitrixGateway,Opcode,Keywords, OpcodeValue to additional.fields.
- Mapped X-Citrix-Via-VIP to _target.ip and _target.asset.ip.
- Mapped Remoteadresse to taregt.ip and target.asset.ip.
- Mapped invalid_X-Forwarded-For to _principal.ip and _principal.asset.ip.
- Mapped Task to _target.resource.type.
- Mapped description to metadata.description.
- Mapped Hostname to _principal.hostname and _principal.asset.hostname.
- Mapped EventID to metadata.product_event_type.
- Mapped RecordNumber to metadata.product_log_id.
- Mapped SourceModuleName to target.resource.name.
- Mapped SourceModuleType to _principal.resource.attribute.labels.

2022-07-22 Enhancement:
- Mapped Machine.AssociatedUserUPNs to target.group.email_addresses.

Date	Changes
2025-02-12	Enhancement: - Added JSON support to new type of logs. - Mapped `EventTime` to `metadata.event_timestamp`. - Mapped `Channel` to `security_result.about.resource.attribute.labels`. - Mapped `Severity` to `security_result.severity`. - Mapped `OpcodeValue`,`X-Citrix-Via`,`ThreadID`,`XCitrixGateway`,`Opcode`,`Keywords`, `OpcodeValue` to `additional.fields`. - Mapped `X-Citrix-Via-VIP` to `_target.ip` and `_target.asset.ip`. - Mapped `Remoteadresse` to `taregt.ip` and `target.asset.ip`. - Mapped `invalid_X-Forwarded-For` to `_principal.ip` and `_principal.asset.ip`. - Mapped `Task` to `_target.resource.type`. - Mapped `description` to `metadata.description`. - Mapped `Hostname` to `_principal.hostname` and `_principal.asset.hostname`. - Mapped `EventID` to `metadata.product_event_type`. - Mapped `RecordNumber` to `metadata.product_log_id`. - Mapped `SourceModuleName` to `target.resource.name`. - Mapped `SourceModuleType` to `_principal.resource.attribute.labels`.
2022-07-22	Enhancement: - Mapped `Machine.AssociatedUserUPNs` to `target.group.email_addresses`.