We've reorganized our documentation navigation structure to align directly with your operational workflows. See the release notes and the walkthrough video for more information.

Change log for PASSWORDSTATE

Date Changes

2025-10-10 - Added support for new format of SYSLOG.
- event.idm.read_only_udm.metadata.description: Newly Mapped Description raw log field with event.idm.read_only_udm.metadata.description UDM field.
- event.idm.read_only_udm.additional.fields: Newly Mapped password_record_account_type raw log field with event.idm.read_only_udm.additional.fields UDM field.
- event.idm.read_only_udm.target.hostname: Newly Mapped target_host raw log field with event.idm.read_only_udm.target.hostname UDM field.
- event.idm.read_only_udm.target.asset.hostname: Newly Mapped target_host raw log field with event.idm.read_only_udm.target.asset.hostname UDM field.
- event.idm.read_only_udm.target.url: Newly Mapped turl raw log field with event.idm.read_only_udm.target.url UDM field.
- event.idm.read_only_udm.principal.user.email_addresses: Newly Mapped pemail raw log field with event.idm.read_only_udm.principal.user.email_addresses UDM field.
- event.idm.read_only_udm.target.ip: Newly Mapped c_Ip raw log field with event.idm.read_only_udm.target.ip UDM field.
- event.idm.read_only_udm.target.asset.ip: Newly Mapped c_Ip raw log field with event.idm.read_only_udm.target.asset.ip UDM field.
- event.idm.read_only_udm.principal.ip: Newly Mapped p_ip raw log field with event.idm.read_only_udm.principal.ip UDM field.
- event.idm.read_only_udm.principal.asset.ip: Newly Mapped p_ip raw log field with event.idm.read_only_udm.principal.asset.ip UDM field.
- event.idm.read_only_udm.principal.ip: Newly Mapped pip raw log field with event.idm.read_only_udm.principal.ip UDM field.
- event.idm.read_only_udm.principal.asset.ip: Newly Mapped pip raw log field with event.idm.read_only_udm.principal.asset.ip UDM field.
- event.idm.read_only_udm.principal.user.userid: Newly Mapped userid raw log field with event.idm.read_only_udm.principal.user.userid UDM field.
- event.idm.read_only_udm.target.user.userid: Newly Mapped UserName raw log field with event.idm.read_only_udm.target.user.userid UDM field.
- event.idm.read_only_udm.additional.fields: Newly Mapped PasswordListID raw log field with event.idm.read_only_udm.additional.fields UDM field.
- event.idm.read_only_udm.additional.fields: Newly Mapped PasswordID raw log field with event.idm.read_only_udm.additional.fields UDM field.
- event.idm.read_only_udm.principal.user.first_name: Newly Mapped first_name raw log field with event.idm.read_only_udm.principal.user.first_name UDM field.
- event.idm.read_only_udm.principal.user.last_name: Newly Mapped last_name raw log field with event.idm.read_only_udm.principal.user.last_name UDM field.
- event.idm.read_only_udm.additional.fields: Newly Mapped access_type raw log field with event.idm.read_only_udm.additional.fields UDM field.
- event.idm.read_only_udm.additional.fields: Newly Mapped Password_List raw log field with event.idm.read_only_udm.additional.fields UDM field.
- event.idm.read_only_udm.additional.fields: Newly Mapped password_record_description raw log field with event.idm.read_only_udm.additional.fields UDM field.
- event.idm.read_only_udm.additional.fields: Newly Mapped _Password raw log field with event.idm.read_only_udm.additional.fields UDM field.
- event.idm.read_only_udm.src.application: Newly Mapped application raw log field with event.idm.read_only_udm.src.application UDM field.
- event.idm.read_only_udm.security_result.description: Newly Mapped sdescription raw log field with event.idm.read_only_udm.security_result.description UDM field.
- event.idm.read_only_udm.target.resource.name: Newly Mapped Title raw log field with event.idm.read_only_udm.target.resource.name UDM field.

2024-06-28 - Newly created parser.

Date	Changes
2025-10-10	- Added support for new format of SYSLOG. - event.idm.read_only_udm.metadata.description: Newly Mapped `Description` raw log field with `event.idm.read_only_udm.metadata.description` UDM field. - event.idm.read_only_udm.additional.fields: Newly Mapped `password_record_account_type` raw log field with `event.idm.read_only_udm.additional.fields` UDM field. - event.idm.read_only_udm.target.hostname: Newly Mapped `target_host` raw log field with `event.idm.read_only_udm.target.hostname` UDM field. - event.idm.read_only_udm.target.asset.hostname: Newly Mapped `target_host` raw log field with `event.idm.read_only_udm.target.asset.hostname` UDM field. - event.idm.read_only_udm.target.url: Newly Mapped `turl` raw log field with `event.idm.read_only_udm.target.url` UDM field. - event.idm.read_only_udm.principal.user.email_addresses: Newly Mapped `pemail` raw log field with `event.idm.read_only_udm.principal.user.email_addresses` UDM field. - event.idm.read_only_udm.target.ip: Newly Mapped `c_Ip` raw log field with `event.idm.read_only_udm.target.ip` UDM field. - event.idm.read_only_udm.target.asset.ip: Newly Mapped `c_Ip` raw log field with `event.idm.read_only_udm.target.asset.ip` UDM field. - event.idm.read_only_udm.principal.ip: Newly Mapped `p_ip` raw log field with `event.idm.read_only_udm.principal.ip` UDM field. - event.idm.read_only_udm.principal.asset.ip: Newly Mapped `p_ip` raw log field with `event.idm.read_only_udm.principal.asset.ip` UDM field. - event.idm.read_only_udm.principal.ip: Newly Mapped `pip` raw log field with `event.idm.read_only_udm.principal.ip` UDM field. - event.idm.read_only_udm.principal.asset.ip: Newly Mapped `pip` raw log field with `event.idm.read_only_udm.principal.asset.ip` UDM field. - event.idm.read_only_udm.principal.user.userid: Newly Mapped `userid` raw log field with `event.idm.read_only_udm.principal.user.userid` UDM field. - event.idm.read_only_udm.target.user.userid: Newly Mapped `UserName` raw log field with `event.idm.read_only_udm.target.user.userid` UDM field. - event.idm.read_only_udm.additional.fields: Newly Mapped `PasswordListID` raw log field with `event.idm.read_only_udm.additional.fields` UDM field. - event.idm.read_only_udm.additional.fields: Newly Mapped `PasswordID` raw log field with `event.idm.read_only_udm.additional.fields` UDM field. - event.idm.read_only_udm.principal.user.first_name: Newly Mapped `first_name` raw log field with `event.idm.read_only_udm.principal.user.first_name` UDM field. - event.idm.read_only_udm.principal.user.last_name: Newly Mapped `last_name` raw log field with `event.idm.read_only_udm.principal.user.last_name` UDM field. - event.idm.read_only_udm.additional.fields: Newly Mapped `access_type` raw log field with `event.idm.read_only_udm.additional.fields` UDM field. - event.idm.read_only_udm.additional.fields: Newly Mapped `Password_List` raw log field with `event.idm.read_only_udm.additional.fields` UDM field. - event.idm.read_only_udm.additional.fields: Newly Mapped `password_record_description` raw log field with `event.idm.read_only_udm.additional.fields` UDM field. - event.idm.read_only_udm.additional.fields: Newly Mapped `_Password` raw log field with `event.idm.read_only_udm.additional.fields` UDM field. - event.idm.read_only_udm.src.application: Newly Mapped `application` raw log field with `event.idm.read_only_udm.src.application` UDM field. - event.idm.read_only_udm.security_result.description: Newly Mapped `sdescription` raw log field with `event.idm.read_only_udm.security_result.description` UDM field. - event.idm.read_only_udm.target.resource.name: Newly Mapped `Title` raw log field with `event.idm.read_only_udm.target.resource.name` UDM field.
2024-06-28	- Newly created parser.