We've reorganized our documentation navigation structure to align directly with your operational workflows. See the release notes and the walkthrough video for more information.

Change log for PING_ONE

Date	Changes
2026-01-29	Enhancement: - `event.idm.read_only_udm.sec_result.detection_fields`: Newly mapped `outcomeDescription`, `outcomeStatusDetail`, `nodeTitle`, `nodeId`, `outcomeType`, `outcomeStatus`, `err_code` raw log fields with `event.idm.read_only_udm.sec_result.detection_fields` UDM field. - `event.idm.read_only_udm.network.session_id`: Newly mapped `transactionId_flow` raw log field with `event.idm.read_only_udm.network.session_id` UDM field. - `event.idm.read_only_udm.target.resource.name`: Newly mapped `flowName` raw log field with `event.idm.read_only_udm.target.resource.name` UDM field. - `event.idm.read_only_udm.target.resource.attribute.labels`: Newly mapped `companyId`, `eventMessage`, `connectorId`, `usageTransactionType` raw log fields with `event.idm.read_only_udm.target.resource.attribute.labels` UDM field. - `event.idm.read_only_udm.additional.fields`: Newly mapped `correlationId_flow`, `flowInteractionEvent_id`, `interactionId`, `originalCapabilityName`, `flow_success`, `identity`, `connectionId`, `err_msg`, `flowVersionId` raw log fields with `event.idm.read_only_udm.additional.fields` UDM field. - `event.idm.read_only_udm.network.http.response_code`: Newly mapped `err_httpResponseCode` raw log field with `event.idm.read_only_udm.network.http.response_code` UDM field. - `event.idm.read_only_udm.network.http.user_agent`: Newly mapped `flow_userAgent` raw log field with `event.idm.read_only_udm.network.http.user_agent` UDM field. - `event.idm.read_only_udm.metadata.ingested_timestamp`: Newly mapped `collectionDate` raw log field with `event.idm.read_only_udm.metadata.ingested_timestamp` UDM field.
2025-11-06	Enhancement: - Added support to new format of json logs. - event.idm.read_only_udm.principal.resource.attribute.labels: Newly mapped `clientType` raw log field with `event.idm.read_only_udm.principal.resource.attribute.labels` UDM Field. - event.idm.read_only_udm.principal.user.title: Newly mapped `user_type` raw log field with `event.idm.read_only_udm.principal.user.title` UDM Field. - event.idm.read_only_udm.principal.resource.attribute.labels: Newly mapped `user_href` raw log field with `event.idm.read_only_udm.principal.resource.attribute.labels` UDM Field. - event.idm.read_only_udm.additional.fields: Newly mapped `population_id` raw log field with `event.idm.read_only_udm.additional.fields` UDM Field. - event.idm.read_only_udm.principal.asset_id: Newly mapped `user_environment_id` raw log field with `event.idm.read_only_udm.principal.asset_id` UDM Field. - event.idm.read_only_udm.principal.user.user_display_name: Newly mapped `actor_username` raw log field with `event.idm.read_only_udm.principal.user.user_display_name` UDM Field. - event.idm.read_only_udm.principal.user.userid: Newly mapped `actor_userid` raw log field with `event.idm.read_only_udm.principal.user.userid` UDM Field. - event.idm.read_only_udm.principal.cloud.project.id: Newly mapped `actor_clientId` raw log field with `event.idm.read_only_udm.principal.cloud.project.id` UDM Field. - event.idm.read_only_udm.principal.cloud.project.name: Newly mapped `client_name` raw log field with `event.idm.read_only_udm.principal.cloud.project.name` UDM Field. - event.idm.read_only_udm.principal.cloud.vpc.id: Newly mapped `environment_id` raw log field with `event.idm.read_only_udm.principal.cloud.vpc.id` UDM Field. - event.idm.read_only_udm.principal.url: Newly mapped `client_href` raw log field with `event.idm.read_only_udm.principal.url` UDM Field. - event.idm.read_only_udm.security_result.summary: Newly mapped `result_description` raw log field with `event.idm.read_only_udm.security_result.summary` UDM Field. - event.idm.read_only_udm.security_result.action: Newly mapped `result_status` raw log field with `event.idm.read_only_udm.security_result.action` UDM Field. - event.idm.read_only_udm.security_result.action_details: Newly mapped `result_status` raw log field with `event.idm.read_only_udm.security_result.action_details` UDM Field. - event.idm.read_only_udm.security_result.detection_fields: Newly mapped `record_transactionId` raw log field with `event.idm.read_only_udm.security_result.detection_fields` UDM Field. - event.idm.read_only_udm.security_result.detection_fields: Newly mapped `record_correlationId` raw log field with `event.idm.read_only_udm.security_result.detection_fields` UDM Field. - event.idm.read_only_udm.security_result.detection_fields: Newly mapped `action_type` raw log field with `event.idm.read_only_udm.security_result.detection_fields` UDM Field. - event.idm.read_only_udm.metadata.event_timestamp: Newly mapped `record_recordedAt` raw log field with `event.idm.read_only_udm.metadata.event_timestamp` UDM Field. - event.idm.read_only_udm.metadata.product_log_id: Newly mapped `record_id` raw log field with `event.idm.read_only_udm.metadata.product_log_id` UDM Field. - event.idm.read_only_udm.principal.ip: Newly mapped `source_ipaddress` raw log field with `event.idm.read_only_udm.principal.ip` UDM Field. - event.idm.read_only_udm.principal.asset.ip: Newly mapped `source_ipaddress` raw log field with `event.idm.read_only_udm.principal.asset.ip` UDM Field. - event.idm.read_only_udm.network.http.user_agent: Newly mapped `source_userAgent` raw log field with `event.idm.read_only_udm.network.http.user_agent` UDM Field. - event.idm.read_only_udm.network.http.parsed_user_agent: Newly mapped `source_userAgent` raw log field with `event.idm.read_only_udm.network.http.parsed_user_agent` UDM Field. - event.idm.read_only_udm.security_result.description: Newly mapped `action_description` raw log field with `event.idm.read_only_udm.security_result.description` UDM Field. - event.idm.read_only_udm.target.url: Newly mapped `resource_url` raw log field with `event.idm.read_only_udm.target.url` UDM Field. - event.idm.read_only_udm.target.user.attribute.labels: Newly mapped `resource_pop_id` raw log field with `event.idm.read_only_udm.target.user.attribute.labels` UDM Field. - event.idm.read_only_udm.target.cloud.project.id: Newly mapped `resource_env_id` raw log field with `event.idm.read_only_udm.target.cloud.project.id` UDM Field. - event.idm.read_only_udm.target.user.email_addresses: Newly mapped `resource_email` raw log field with `event.idm.read_only_udm.target.user.email_addresses` UDM Field. - event.idm.read_only_udm.target.user.user_display_name: Newly mapped `resource_name` raw log field with `event.idm.read_only_udm.target.user.user_display_name` UDM Field. - event.idm.read_only_udm.target.resource.id: Newly mapped `resource_id` raw log field with `event.idm.read_only_udm.target.resource.id` UDM Field. - event.idm.read_only_udm.target.resource.resource_subtype: Newly mapped `resource_type` raw log field with `event.idm.read_only_udm.target.resource.resource_subtype` UDM Field.
2024-12-05	Enhancement: - Mapped `event.browser.userAgent` to `network.http.user_agent`. - Mapped `source.userAgent` to `additional.fields`.
2024-11-12	Newly created parser.