Change log for CLOUDGENIX_SDWAN
| Date | Changes |
|---|---|
| 2022-09-08 |
Enhancement- - Added conditional check for PROTOCOL_NAME.- Added conditional check for MSG if it is similar failure,fail,invalid user,closed,closing set event_type to STATUS_SHUTDOWN.- Set event_type to NETWORK_FLOW when principal.ip and target.ip not null.- Set event_type to STATUS_STARTUP when MSG similar to initiating,establishing,establishing,check pass.- Set event_type to STATUS_UNCATEGORIZED when MSG similar to no such user.- Added grok pattern for MSG to retrieve dest_ip and Mapped it to target.ip.- Added grok pattern for the new logs to retrieve ION_HOST.- Mapped ION_HOST to principal.hostname.
|