Change log for LASTPASS

Date Changes
2026-05-11 Enhancement:
- Added a Grok pattern to parse the raw log fields.
- event.idm.read_only_udm.principal.ip and event.idm.read_only_udm.principal.asset.ip: Newly mapped lastpass_raw.IP_Address raw log field with event.idm.read_only_udm.principal.ip and event.idm.read_only_udm.principal.asset.ip UDM field.
- event.idm.read_only_udm.principal.user.userid: Newly mapped principal.user.userid raw log field with event.idm.read_only_udm.principal.user.userid UDM field.
- event.idm.read_only_udm.target.user.userid: Newly mapped lastpass_raw.Username raw log field with event.idm.read_only_udm.target.user.userid UDM field.
- event.idm.read_only_udm.target.resource.name: Newly mapped target.resource.name raw log field with event.idm.read_only_udm.target.resource.name UDM field.
- event.idm.read_only_udm.metadata.event_timestamp: Newly mapped lastpass_raw.Time raw log field with event.idm.read_only_udm.metadata.event_timestamp UDM field.
- event.idm.read_only_udm.metadata.product_event_type: Newly mapped lastpass_raw.Action raw log field with event.idm.read_only_udm.metadata.product_event_type UDM field.
- event.idm.read_only_udm.security_result.description: Newly mapped lastpass_raw.Data raw log field with event.idm.read_only_udm.security_result.description UDM field.
- event.idm.read_only_udm.additional.fields: Newly mapped additional.fields, metadata.product_event_type raw log fields with event.idm.read_only_udm.additional.fields UDM field.
- event.idm.read_only_udm.security_result.detection_fields: Newly mapped security_result.detection_fields raw log field with event.idm.read_only_udm.security_result.detection_fields UDM field.
- Updated the naming convention to avoid conflict with raw log fields:
- Changed the naming convention from security_result to event_security_result.
- Changed the naming convention from additional to event_additional.
- Changed the naming convention from target to event_target.
- Changed the naming convention from principal to event_principal.
- Changed the naming convention from metadata to event_metadata.
2025-05-29 Enhancement:
- event.idm.read_only_udm.metadata.event_timestamp: Newly Mapped Datetime raw log field with event.idm.read_only_udm.metadata.event_timestamp UDM Field.
- event.idm.read_only_udm.target.user.userid: Newly Mapped UserId raw log field with event.idm.read_only_udm.target.user.userid UDM Field.
- event.idm.read_only_udm.target.user.email_addresses: Newly Mapped UserId raw log field with event.idm.read_only_udm.target.user.email_addresses UDM Field.
- event.idm.read_only_udm.metadata.product_event_type: Newly Mapped ActionText raw log field with event.idm.read_only_udm.metadata.product_event_type UDM Field.
- event.idm.read_only_udm.security_result.description: Newly Mapped Event raw log field with event.idm.read_only_udm.security_result.description UDM Field.
- event.idm.read_only_udm.network.session_id: Newly Mapped VID raw log field with event.idm.read_only_udm.network.session_id UDM Field.
- event.idm.read_only_udm.principal.ip: Newly Mapped Ip raw log field with event.idm.read_only_udm.principal.ip UDM Field.
- event.idm.read_only_udm.principal.asset.ip: Newly Mapped Ip raw log field with event.idm.read_only_udm.principal.asset.ip UDM Field.
- event.idm.read_only_udm.additional.fields.key: Newly Mapped EventType raw log field with event.idm.read_only_udm.additional.fields.key UDM Field.
2024-03-22 Newly created parser.