Change log for FASTLY_CDN
| Date | Changes |
|---|---|
| 2026-07-16 |
Enhancement: - event.idm.read_only_udm.principal.hostname and event.idm.read_only_udm.principal.asset.hostname: Removed the mapping of host raw log field to event.idm.read_only_udm.principal.hostname and event.idm.read_only_udm.principal.asset.hostname UDM fields as it represents the target hostname to which the client is connecting.- event.idm.read_only_udm.target.hostname and event.idm.read_only_udm.target.asset.hostname: Mapped the host raw log field to event.idm.read_only_udm.target.hostname and event.idm.read_only_udm.target.asset.hostname UDM fields.- event.idm.read_only_udm.metadata.event_type: Newly mapped event.idm.read_only_udm.metadata.event_type to NETWORK_HTTP when log has principal and target machine data along with HTTP details.
|
| 2026-07-14 |
Enhancement: - event.idm.read_only_udm.network.http.response_code: Added support for status to ensure proper mapping to event.idm.read_only_udm.network.http.response_code.- event.idm.read_only_udm.network.tls.established: Added support for is_tls to ensure proper mapping to event.idm.read_only_udm.network.tls.established.- event.idm.read_only_udm.additional.fields: Newly mapped cookies, platform_origin, post_body, request_accept_charset raw log fields with event.idm.read_only_udm.additional.fields UDM field.
|
| 2026-01-02 |
Enhancement: - Added logic to handle \r\n characters in the raw JSON message.- Updated metadata.event_type to NETWORK_CONNECTION when target and principal/target details are available.- Enhanced protocol field parsing using grok to extract the base protocol name.- event.idm.read_only_udm.metadata.event_timestamp: Newly mapped timestamp raw log field to event.idm.read_only_udm.metadata.event_timestamp.- event.idm.read_only_udm.metadata.product_event_type: Newly mapped service_id raw log field to event.idm.read_only_udm.metadata.product_event_type.- event.idm.read_only_udm.network.session_duration.seconds: Newly mapped time_elapsed raw log field to event.idm.read_only_udm.network.session_duration.seconds.- event.idm.read_only_udm.principal.group.group_display_name: Newly mapped client_as_name raw log field to event.idm.read_only_udm.principal.group.group_display_name.- event.idm.read_only_udm.network.asn: Newly mapped client_as_number raw log field to event.idm.read_only_udm.network.asn.- event.idm.read_only_udm.network.http.method: Newly mapped request raw log field to event.idm.read_only_udm.network.http.method.- event.idm.read_only_udm.network.application_protocol: Newly mapped protocol raw log field to event.idm.read_only_udm.network.application_protocol.- event.idm.read_only_udm.target.hostname: Newly mapped origin_host raw log field to event.idm.read_only_udm.target.hostname.- event.idm.read_only_udm.target.asset.hostname: Newly mapped origin_host raw log field to event.idm.read_only_udm.target.asset.hostname.- event.idm.read_only_udm.network.tls.version_protocol: Newly mapped tls_client_protocol raw log field to event.idm.read_only_udm.network.tls.version_protocol.- event.idm.read_only_udm.network.tls.client.server_name: Newly mapped tls_client_servername raw log field to event.idm.read_only_udm.network.tls.client.server_name.- event.idm.read_only_udm.network.tls.cipher: Newly mapped tls_client_cipher raw log field to event.idm.read_only_udm.network.tls.cipher.- event.idm.read_only_udm.network.tls.established: Newly mapped is_tls raw log field to event.idm.read_only_udm.network.tls.established.- event.idm.read_only_udm.network.received_bytes: Newly mapped req_body_size raw log field to event.idm.read_only_udm.network.received_bytes.- event.idm.read_only_udm.network.sent_bytes: Newly mapped resp_body_size raw log field to event.idm.read_only_udm.network.sent_bytes.- event.idm.read_only_udm.network.http.response_code: Newly mapped status raw log field to event.idm.read_only_udm.network.http.response_code.- event.idm.read_only_udm.intermediary.hostname: Newly mapped server raw log field to event.idm.read_only_udm.intermediary.hostname.- event.idm.read_only_udm.intermediary.asset.hostname: Newly mapped server raw log field to event.idm.read_only_udm.intermediary.asset.hostname.- event.idm.read_only_udm.intermediary.ip: Newly mapped server_ip raw log field to event.idm.read_only_udm.intermediary.ip.- event.idm.read_only_udm.intermediary.asset.ip: Newly mapped server_ip raw log field to event.idm.read_only_udm.intermediary.asset.ip.- event.idm.read_only_udm.intermediary.location.name: Newly mapped server_datacenter raw log field to event.idm.read_only_udm.intermediary.location.name.- event.idm.read_only_udm.principal.location.country_or_region: Newly mapped geo_country_code raw log field to event.idm.read_only_udm.principal.location.country_or_region.- event.idm.read_only_udm.principal.location.state: Newly mapped geo_region raw log field to event.idm.read_only_udm.principal.location.state.- event.idm.read_only_udm.principal.resource.attribute.labels: Newly mapped client_connection_speed raw log field to event.idm.read_only_udm.principal.resource.attribute.labels.- event.idm.read_only_udm.security_result.detection_fields: Newly mapped cache_status raw log field to event.idm.read_only_udm.security_result.detection_fields.- event.idm.read_only_udm.additional.fields: Newly mapped request_accept_content, request_accept_language, request_accept_encoding, content_type, response_cache_control, response_expires, response_last_modified, geo_continent_code, req_header_size, resp_header_size, time_start, time_end, socket_cwnd, socket_tcpi_rtt, is_ipv6, platform_cluster, platform_router raw log fields to event.idm.read_only_udm.additional.fields.
|
| 2025-01-10 | Newly created parser. |