Change log for JUNIPER_JUNOS
| Date | Changes |
|---|---|
| 2025-10-10 |
Enhancement- - event.idm.read_only_udm.principal.resource.name: Newly mapped interface raw log field with event.idm.read_only_udm.principal.resource.name UDM field.- event.idm.read_only_udm.target.process.pid : Newly mapped p_id raw log field with event.idm.read_only_udm.target.process.pid UDM field.- Modified a grok pattern to capture lldp_status instead of sub_type from the raw log for specific message formats.- Added a security_result element where detection_fields includes key neighbor_count mapped from the neighbor_count variable.- Added a security_result element where detection_fields includes key lldp_status mapped from the lldp_status variable.
|
| 2024-06-18 |
Enhancement- - Added support to handle unparsed SYSLOG logs. |
| 2024-06-07 |
Enhancement- - Added Grok patterns to parse the new pattern of SYSLOG logs. - When protocol-name has a valid IP protocol, then mapped protocol-name to network.ip_protocol.
|
| 2024-05-02 |
Enhancement- - Added Grok patterns to support new SYSLOG + KV format logs. |
| 2023-10-25 |
Enhancement- - Added Grok patterns to parse unparsed logs. - Mapped source_port to principal.port.- Mapped source_address to principal.ip.- Mapped user_name to target.user.userid.- Mapped application_name to target.application.- Mapped p_id to target.process.pid.- Added invalid_pattern check before KV mapping.- Added a Grok pattern to map security_result.description when description_present is false.
|
| 2023-08-17 |
Enhancement- - Added Grok pattern to parsed unparsed logs. - Mapped msg to security_result.summary.- Mapped src_ip to principal.ip.- Mapped user to target.user.userid.- Mapped username to principal.user.userid.- Mapped command to target.process.command_line.- Mapped src_port to principal.port.- Mapped ssh2 to security_result.detection_fields.- Mapped sha256 to principal.process.file.sha256.- Mapped desc to sec_result.summary.- Mapped mac-address to principal.mac.- Mapped host to principal.hostname if event_type is STATUS_UPDATE.
|
| 2023-01-15 |
Enhancement- - Modified Grok pattern to support unparsed logs containing type UI_CMDLINE_READ_LINE, UI_COMMIT_PROGRESS, UI_CHILD_START,UI_CFG_AUDIT_OTHER, UI_LOGIN_EVENT, UI_CHILD_STATUS, UI_LOGOUT_EVENT, UI_LOAD_EVENT,JTASK_IO_CONNECT_FAILED, UI_AUTH_EVENT, UI_NETCONF_CMD, UI_COMMIT_NO_MASTER_PASSWORD, UI_CFG_AUDIT_SET, UI_JUNOSCRIPT_CMD,SNMPD_AUTH_FAILURE, UI_CFG_AUDIT_NEW, UI_COMMIT , LIBJNX_LOGIN_ACCOUNT_LOCKED, UI_COMMIT_COMPLETED,PAM_USER_LOCK_LOGIN_REQUESTS_DENIED, RTPERF_CPU_USAGE_OK, RTPERF_CPU_THRESHOLD_EXCEEDED, LIBJNX_LOGIN_ACCOUNT_UNLOCKED,JSRPD_SET_OTHER_INTF_MON_FAIL, JSRPD_SET_SCHED_MON_FAILURE, UI_CHILD_WAITPID, UI_DBASE_LOGIN_EVENT.
|
| 2022-05-02 | New default parser. |