We've reorganized our documentation navigation structure to align directly with your operational workflows. See the release notes and the walkthrough video for more information.

Change log for NETSCOUT_OCI

Date Changes

2024-02-21 Enhancement:
- Added support for new version of Syslog CEF logs.
- Mapped url to target.url.
- Mapped app to target.application.
- When src_iporhost is a valid IP, then mapped it to principal.ip or else mapped it to principal.hostname.
- Mapped mitreTactic, mitreTechnique, srcCount, dstCount, srcHostGroupCount, dstHostGroupCount, interfaceCount, violationCount, dstHostGroup, and srcHostGroup to security_result.detection_fields.
- Removed desc mapping to security_result.description as it is already being mapped to metadata.description.
- Mapped iocDescription to security_result.description.
- Mapped Category to security_result.category_details.
- Mapped Policy and Classification to additional.fields.

2023-09-04 Newly created parser.

Date	Changes
2024-02-21	Enhancement: - Added support for new version of Syslog CEF logs. - Mapped `url` to `target.url`. - Mapped `app` to `target.application`. - When `src_iporhost` is a valid IP, then mapped it to `principal.ip` or else mapped it to `principal.hostname`. - Mapped `mitreTactic`, `mitreTechnique`, `srcCount`, `dstCount`, `srcHostGroupCount`, `dstHostGroupCount`, `interfaceCount`, `violationCount`, `dstHostGroup`, and `srcHostGroup` to `security_result.detection_fields`. - Removed `desc` mapping to `security_result.description` as it is already being mapped to `metadata.description`. - Mapped `iocDescription` to `security_result.description`. - Mapped `Category` to `security_result.category_details`. - Mapped `Policy` and `Classification` to `additional.fields`.
2023-09-04	Newly created parser.