Change log for HAPROXY

Date	Changes
2026-06-01	Enhancement: - Added a grok pattern to parse the raw logs. - event.idm.read_only_udm.network.tls.client.server_name: Newly mapped sni raw log field with event.idm.read_only_udm.network.tls.client.server_name UDM field. - event.idm.read_only_udm.metadata.collected_timestamp: Newly mapped sys_time field with event.idm.read_only_udm.metadata.collected_timestamp UDM field. - event.idm.read_only_udm.principal.application: Newly mapped prin_app field with event.idm.read_only_udm.principal.application UDM field. - event.idm.read_only_udm.principal.process.pid: Newly mapped prin_pid field with event.idm.read_only_udm.principal.process.pid UDM field. - event.idm.read_only_udm.metadata.event_timestamp: Newly mapped date_time field with event.idm.read_only_udm.metadata.event_timestamp UDM field. - event.idm.read_only_udm.observer.resource.attribute.labels: Newly mapped frontendName, backendName fields with event.idm.read_only_udm.observer.resource.attribute.labels UDM field. - event.idm.read_only_udm.target.url: Newly mapped uri raw log field with event.idm.read_only_udm.target.url UDM field. - Added a grok pattern on request raw log field to extract method, proto and tar_host fields. - event.idm.read_only_udm.network.http.method: Newly mapped method field with event.idm.read_only_udm.network.http.method UDM field. - event.idm.read_only_udm.target.ip and event.idm.read_only_udm.target.asset.ip: Newly mapped host_ip field with event.idm.read_only_udm.target.ip and event.idm.read_only_udm.target.asset.ip UDM field. - event.idm.read_only_udm.target.hostname and event.idm.read_only_udm.target.asset.hostname: Newly mapped host raw log field with event.idm.read_only_udm.target.hostname and event.idm.read_only_udm.target.asset.hostname UDM field. - event.idm.read_only_udm.target.hostname and event.idm.read_only_udm.target.asset.hostname: Newly mapped tar_host field with event.idm.read_only_udm.target.hostname and event.idm.read_only_udm.target.asset.hostname UDM field when host raw log field is null. - event.idm.read_only_udm.network.application_protocol_version: Newly mapped proto field with event.idm.read_only_udm.network.application_protocol_version UDM field. - event.idm.read_only_udm.network.application_protocol: Newly mapped proto_value field with event.idm.read_only_udm.network.application_protocol UDM field. - event.idm.read_only_udm.metadata.event_type: Updated the event.idm.read_only_udm.metadata.event_type to NETWORK_HTTP, NETWORK_CONNECTION and STATUS_UPDATE when necessary raw log fields are present else set it to GENERIC_EVENT. - event.idm.read_only_udm.additional.fields: Newly mapped timers field with event.idm.read_only_udm.additional.fields UDM field.
2025-07-30	Enhancement: - Added a Grok pattern to parse new pattern of logs. - Added KV filter block to parse the kv_data field, splitting keys and values. - event.idm.read_only_udm.principal.ip: Newly mapped source_ip raw log field with event.idm.read_only_udm.principal.ip UDM field . - event.idm.read_only_udm.principal.asset.ip: Newly mapped source_ip raw log field with event.idm.read_only_udm.principal.asset.ip UDM field . - event.idm.read_only_udm.principal.port: Newly mapped source_port raw log field with event.idm.read_only_udm.principal.port UDM field . - event.idm.read_only_udm.network.http.response_code: Newly mapped status_code raw log field with event.idm.read_only_udm.network.http.response_code UDM field . - event.idm.read_only_udm.network.received_bytes: Newly mapped bytes raw log field with event.idm.read_only_udm.network.received_bytes UDM field . - event.idm.read_only_udm.intermediary.ip: Newly mapped inter_ip (from header_host) raw log field with event.idm.read_only_udm.intermediary.ip UDM field . - event.idm.read_only_udm.intermediary.port: Newly mapped inter_port (from header_host) raw log field with event.idm.read_only_udm.intermediary.port UDM field . - event.idm.read_only_udm.target.ip: Newly mapped destination_ip raw log field with event.idm.read_only_udm.target.ip UDM field . - event.idm.read_only_udm.target.asset.ip: Newly mapped destination_ip raw log field with event.idm.read_only_udm.target.asset.ip UDM field . - event.idm.read_only_udm.target.port: Newly mapped destination_port raw log field with event.idm.read_only_udm.target.port UDM field . - event.idm.read_only_udm.network.http.referral_url: Newly mapped referer raw log field with event.idm.read_only_udm.network.http.referral_url UDM field . - event.idm.read_only_udm.network.http.user_agent: Newly mapped user_agent raw log field with event.idm.read_only_udm.network.http.user_agent UDM field . - event.idm.read_only_udm.security_result.detection_fields: Newly mapped time_stamp raw log field with event.idm.read_only_udm.security_result.detection_fields UDM field . - event.idm.read_only_udm.security_result.detection_fields: Newly mapped x_forwarded_for raw log field with event.idm.read_only_udm.security_result.detection_fields UDM field . - event.idm.read_only_udm.security_result.detection_fields: Newly mapped content_length raw log field with event.idm.read_only_udm.security_result.detection_fields UDM field . - event.idm.read_only_udm.metadata.event_timestamp: Newly mapped datetime raw log field with event.idm.read_only_udm.metadata.event_timestamp UDM field .
2024-08-23	Enhancement: - Added support for a new pattern of syslog logs.
2023-09-25	Enhancement: - Added new Grok patterns to parse new type of logs. - Mapped http_version to metadata.product_version. - Mapped user_name to target.user.userid. - Mapped process_name to target.application. - Mapped severity to security_result.severity. - Mapped msg to security_result.summary. - Added new conditions for new log types and their severity.
2023-05-08	- Added new Grok pattern to parse new type of logs.
2022-10-20	Newly created parser.