We've reorganized our documentation navigation structure to align directly with your operational workflows. See the release notes and the walkthrough video for more information.

Change log for SAP_WEBDISP

Date Changes

2026-01-15 Enhancement:
- Added support for JSON format.
- Mapping the whole raw log into metadata.description field to parse the generic event logs.
- event.idm.read_only_udm.additional.fields: Newly mapped clz_dir, clz_subdir, clzfilename and sap_code raw log fields with event.idm.read_only_udm.additional.fields UDM field.
- event.idm.read_only_udm.metadata.event_timestamp: Newly mapped _time raw log field with event.idm.read_only_udm.metadata.event_timestamp UDM field.
- event.idm.read_only_udm.metadata.collected_timestamp: Newly mapped log_timestamp raw log field with event.idm.read_only_udm.metadata.collected_timestamp UDM field.
- event.idm.read_only_udm.network.http.response_code: Newly mapped response_code raw log field with event.idm.read_only_udm.network.http.response_code UDM field.
- event.idm.read_only_udm.principal.asset.hostname: Newly mapped host raw log field with event.idm.read_only_udm.principal.asset.hostname UDM field.
- event.idm.read_only_udm.principal.hostname: Newly mapped host raw log field with event.idm.read_only_udm.principal.hostname UDM field.
- event.idm.read_only_udm.principal.process.pid: Newly mapped thread_id raw log field with event.idm.read_only_udm.principal.process.pid UDM field.
- event.idm.read_only_udm.security_result.detection_fields: Newly mapped transaction_id, file, line, msg_start and msg_end raw log fields with event.idm.read_only_udm.security_result.detection_fields UDM field.
- event.idm.read_only_udm.security_result.severity: Newly mapped severity raw log field with event.idm.read_only_udm.security_result.severity UDM field.
- event.idm.read_only_udm.target.file.full_path: Newly mapped source raw log field with event.idm.read_only_udm.target.file.full_path UDM field.
- event.idm.read_only_udm.target.url: Newly mapped target_url raw log field with event.idm.read_only_udm.target.url UDM field.
- event.idm.read_only_udm.target.resource.attribute.labels: Newly mapped sap_component and system_id raw log fields with event.idm.read_only_udm.target.resource.attribute.labels UDM field.

2024-03-15 - Newly created parser.

Date	Changes
2026-01-15	Enhancement: - Added support for JSON format. - Mapping the whole raw log into `metadata.description` field to parse the generic event logs. - `event.idm.read_only_udm.additional.fields`: Newly mapped `clz_dir`, `clz_subdir`, `clzfilename` and `sap_code` raw log fields with `event.idm.read_only_udm.additional.fields` UDM field. - `event.idm.read_only_udm.metadata.event_timestamp`: Newly mapped `_time` raw log field with `event.idm.read_only_udm.metadata.event_timestamp` UDM field. - `event.idm.read_only_udm.metadata.collected_timestamp`: Newly mapped `log_timestamp` raw log field with `event.idm.read_only_udm.metadata.collected_timestamp` UDM field. - `event.idm.read_only_udm.network.http.response_code`: Newly mapped `response_code` raw log field with `event.idm.read_only_udm.network.http.response_code` UDM field. - `event.idm.read_only_udm.principal.asset.hostname`: Newly mapped `host` raw log field with `event.idm.read_only_udm.principal.asset.hostname` UDM field. - `event.idm.read_only_udm.principal.hostname`: Newly mapped `host` raw log field with `event.idm.read_only_udm.principal.hostname` UDM field. - `event.idm.read_only_udm.principal.process.pid`: Newly mapped `thread_id` raw log field with `event.idm.read_only_udm.principal.process.pid` UDM field. - `event.idm.read_only_udm.security_result.detection_fields`: Newly mapped `transaction_id`, `file`, `line`, `msg_start` and `msg_end` raw log fields with `event.idm.read_only_udm.security_result.detection_fields` UDM field. - `event.idm.read_only_udm.security_result.severity`: Newly mapped `severity` raw log field with `event.idm.read_only_udm.security_result.severity` UDM field. - `event.idm.read_only_udm.target.file.full_path`: Newly mapped `source` raw log field with `event.idm.read_only_udm.target.file.full_path` UDM field. - `event.idm.read_only_udm.target.url`: Newly mapped `target_url` raw log field with `event.idm.read_only_udm.target.url` UDM field. - `event.idm.read_only_udm.target.resource.attribute.labels`: Newly mapped `sap_component` and `system_id` raw log fields with `event.idm.read_only_udm.target.resource.attribute.labels` UDM field.
2024-03-15	- Newly created parser.