Change log for SECUREAUTH_SSO

Date	Changes
2026-04-20	Enhancement: - Added support for JSON+KV log formats. - event.idm.read_only_udm.metadata.collected_timestamp: Newly mapped _timestamp raw log field with event.idm.read_only_udm.metadata.collected_timestamp UDM field. - event.idm.read_only_udm.intermediary.ip: Newly mapped i_ip raw log field with event.idm.read_only_udm.intermediary.ip UDM field. - event.idm.read_only_udm.intermediary.port: Newly mapped i_port raw log field with event.idm.read_only_udm.intermediary.port UDM field. - event.idm.read_only_udm.metadata.product_event_type: Newly mapped parsed.LogChannel raw log field with event.idm.read_only_udm.metadata.product_event_type UDM field. - event.idm.read_only_udm.metadata.product_version: Newly mapped parsed.FormatVersion raw log field with event.idm.read_only_udm.metadata.product_version UDM field. - event.idm.read_only_udm.metadata.product_log_id: Newly mapped parsed.EventID raw log field with event.idm.read_only_udm.metadata.product_log_id UDM field. - event.idm.read_only_udm.principal.resource.product_object_id: Newly mapped parsed.CompanyID raw log field with event.idm.read_only_udm.principal.resource.product_object_id UDM field. - event.idm.read_only_udm.principal.resource.name: Newly mapped parsed.Realm raw log field with event.idm.read_only_udm.principal.resource.name UDM field. - event.idm.read_only_udm.principal.ip: Newly mapped parsed.UserHostAddress raw log field with event.idm.read_only_udm.principal.ip UDM field. - event.idm.read_only_udm.principal.asset.ip: Newly mapped parsed.UserHostAddress raw log field with event.idm.read_only_udm.principal.asset.ip UDM field. - event.idm.read_only_udm.principal.hostname: Newly mapped host.name raw log field with event.idm.read_only_udm.principal.hostname UDM field. - event.idm.read_only_udm.principal.asset.hostname: Newly mapped host.name raw log field with event.idm.read_only_udm.principal.asset.hostname UDM field. - event.idm.read_only_udm.metadata.id: Newly mapped parsed.RequestID raw log field with event.idm.read_only_udm.metadata.id UDM field. - event.idm.read_only_udm.principal.location.name: Newly mapped meta.cloud.availability_zone raw log field with event.idm.read_only_udm.principal.location.name UDM field. - event.idm.read_only_udm.principal.location.country_or_region: Newly mapped meta.cloud.region raw log field with event.idm.read_only_udm.principal.location.country_or_region UDM field. - event.idm.read_only_udm.principal.resource.id: Newly mapped host.id raw log field with event.idm.read_only_udm.principal.resource.id UDM field. - event.idm.read_only_udm.observer.hostname: Newly mapped LogstashPod raw log field with event.idm.read_only_udm.observer.hostname UDM field. - event.idm.read_only_udm.principal.asset.asset_id: Newly mapped fields.ApplianceID raw log field with event.idm.read_only_udm.principal.asset.asset_id UDM field. - event.idm.read_only_udm.additional.fields: Newly mapped LogChannel, FormatVersion, EventID, Version, parsed.UserAgent, parsed.ApplianceID, beat.name, beat.hostname, beat.version, fields.CompanyID, derived.CompanyIndex, _version, derived.EventType, prospector.type, input.type, parsed_Message raw log fields with event.idm.read_only_udm.additional.fields UDM field. - event.idm.read_only_udm.principal.resource.attribute.labels: Newly mapped meta.cloud.machine_type, ApplianceType, parsed.Version, host.architecture, host.os.platform, host.os.version, host.os.build, host.os.family, host.os.name, meta.cloud.provider, derived.LogChannelIndex, document_id, meta.cloud.instance_id, tags raw log fields with event.idm.read_only_udm.principal.resource.attribute.labels UDM field.
2025-07-24	- Added a gsub to parse proper value. - event.idm.read_only_udm.target.resource.name: Newly mapped Realm raw log field with event.idm.read_only_udm.target.resource.name UDM field. - event.idm.read_only_udm.additional.fields: Newly mapped CompanyID, PEN, ApplianceID, ApplianceMachineName, RequestID, UseJava raw log fields with event.idm.read_only_udm.additional.fields UDM field.
2023-07-09	- Added support for a new log format: SYSLOG + KV. - Added a Grok pattern to parse the new logs.
2022-04-25	New: Updated and converted customer-specific version to default.