We've reorganized our documentation navigation structure to align directly with your operational workflows. See the release notes and the walkthrough video for more information.

Change log for HARNESS_IO

Date	Changes
2025-04-16	- Added a JSON block to handle single json logs. - event.idm.read_only_udm.additional.fields: Removed mapping of `records.auditModule` from `event.idm.read_only_udm.additional.fields` UDM field and mapped `auditModule` instead. - event.idm.read_only_udm.additional.fields: Removed mapping of `records.auditResource.type` from `event.idm.read_only_udm.additional.fields` UDM field and mapped `auditResource.type` instead. - event.idm.read_only_udm.additional.fields: Removed mapping of `records.auditResource.identifier` from `event.idm.read_only_udm.additional.fields` UDM field and mapped `auditResource.identifier` instead. - event.idm.read_only_udm.additional.fields: Removed mapping of `records.auditResourceScope.accountIdentifier` from `event.idm.read_only_udm.additional.fields` UDM field and mapped `auditResourceScope.accountIdentifier` instead. - event.idm.read_only_udm.metadata.product_event_type: Removed mapping of `records.auditAction` from `event.idm.read_only_udm.metadata.product_event_type` UDM field and mapped `auditAction` instead. - event.idm.read_only_udm.network.http.method: Removed mapping of `records.auditHttpRequestInfo.requestMethod` from `event.idm.read_only_udm.network.http.method` UDM field and mapped `auditHttpRequestInfo.requestMethod` instead. - event.idm.read_only_udm.principal.ip and event.idm.read_only_udm.principal.asset.ip: Removed mapping of `records.auditHttpRequestInfo.clientIP` from `event.idm.read_only_udm.principal.ip` and `event.idm.read_only_udm.principal.asset.ip` UDM fields and mapped `auditHttpRequestInfo.clientIP` instead. - event.idm.read_only_udm.metadata.event_timestamp: Removed mapping of `records.auditEventTime` from `event.idm.read_only_udm.metadata.event_timestamp` UDM field and mapped `auditEventTime` instead. - event.idm.read_only_udm.additional.fields: Removed mapping of `records.auditEventMetadata.batchId` from `event.idm.read_only_udm.additional.fields` UDM field and mapped `auditEventMetadata.batchId` instead. - If has_principal `is true AND` has_user `is true then set` event.idm.read_only_udm.metadata.event_type` to `USER_UNCATEGORIZED` - If `has_principal` is `true` then set `event.idm.read_only_udm.metadata.event_type` to `STATUS_UPDATE` - Initialized `principal`, `target`, `metadata`, `extensions`, `network`, `additional` in the for loop.
2025-02-05	- Added support to parse the new log format.
2024-10-17	- Newly created parser