We've reorganized our documentation navigation structure to align directly with your operational workflows. See the release notes and the walkthrough video for more information.

Change log for STACKHAWK

Date Changes

2025-02-18 - Mapped timestamp to metadata.collected_timestamp.
- Mapped userIPAddr to principal.ip.
- Mapped id to metadata.product_log_id.
- Mapped organizationId to additional.fields.
- Mapped userId to principal.user.userid.
- Mapped userName to principal.user.user_display_name.
- Mapped userEmail to target.user.email_addresses.
- Mapped appId to additional.fields.
- Mapped appName to additional.fields.
- Mapped scanId to additional.fields.
- Mapped triageNote to additional.fields.
- Mapped envId to additional.fields.
- Mapped pathsCount to additional.fields.
- Mapped triageStatus to additional.fields.
- Mapped userExternalId to additional.fields.
- Mapped apiSource to additional.fields.
- Mapped userProvider to additional.fields.
- Mapped msg.service to additional.fields.
- Mapped msg.scanCompleted.scan.id to additional.fields.
- Mapped msg.scanStarted.scan.id to additional.fields.
- Mapped msg.scanStarted.scan.hawkscanVersion to additional.fields.
- Mapped msg.scanCompleted.scan.hawkscanVersion to additional.fields.
- Mapped msg.scanStarted.scan.env to additional.fields.
- Mapped msg.scanCompleted.scan.env to additional.fields.
- Mapped msg.scanStarted.scan.status to additional.fields.
- Mapped msg.scanCompleted.scan.status to additional.fields.
- Mapped msg.scanStarted.scan.application to additional.fields.
- Mapped msg.scanCompleted.scan.application to additional.fields.
- Mapped msg.scanCompleted.scan.startedTimestamp to additional.fields.
- Mapped msg.scanStarted.scan.startedTimestamp to additional.fields.
- Mapped msg.scanStarted.scan.scanURL to principal.url.
- Mapped msg.scanCompleted.scan.scanURL to principal.url.
- Mapped service to additional.fields.
- Mapped scanCompleted.scan.id to additional.fields.
- Mapped scanStarted.scan.id to additional.fields.
- Mapped scanStarted.scan.hawkscanVersion to additional.fields.
- Mapped scanCompleted.scan.hawkscanVersion to additional.fields.
- Mapped scanStarted.scan.env to additional.fields.
- Mapped scanCompleted.scan.env to additional.fields.
- Mapped scanStarted.scan.status to additional.fields.
- Mapped scanCompleted.scan.status to additional.fields.
- Mapped scanStarted.scan.application to additional.fields.
- Mapped scanCompleted.scan.application to additional.fields.
- Mapped scanCompleted.scan.startedTimestamp to additional.fields.
- Mapped scanStarted.scan.startedTimestamp to additional.fields.
- Mapped scanStarted.scan.scanURL to principal.url.
- Mapped scanCompleted.scan.scanURL to principal.url.

Date	Changes
2025-02-18	- Mapped `timestamp` to `metadata.collected_timestamp`. - Mapped `userIPAddr` to `principal.ip`. - Mapped `id` to `metadata.product_log_id`. - Mapped `organizationId` to `additional.fields`. - Mapped `userId` to `principal.user.userid`. - Mapped `userName` to `principal.user.user_display_name`. - Mapped `userEmail` to `target.user.email_addresses`. - Mapped `appId` to `additional.fields`. - Mapped `appName` to `additional.fields`. - Mapped `scanId` to `additional.fields`. - Mapped `triageNote` to `additional.fields`. - Mapped `envId` to `additional.fields`. - Mapped `pathsCount` to `additional.fields`. - Mapped `triageStatus` to `additional.fields`. - Mapped `userExternalId` to `additional.fields`. - Mapped `apiSource` to `additional.fields`. - Mapped `userProvider` to `additional.fields`. - Mapped `msg.service` to `additional.fields`. - Mapped `msg.scanCompleted.scan.id` to `additional.fields`. - Mapped `msg.scanStarted.scan.id` to `additional.fields`. - Mapped `msg.scanStarted.scan.hawkscanVersion` to `additional.fields`. - Mapped `msg.scanCompleted.scan.hawkscanVersion` to `additional.fields`. - Mapped `msg.scanStarted.scan.env` to `additional.fields`. - Mapped `msg.scanCompleted.scan.env` to `additional.fields`. - Mapped `msg.scanStarted.scan.status` to `additional.fields`. - Mapped `msg.scanCompleted.scan.status` to `additional.fields`. - Mapped `msg.scanStarted.scan.application` to `additional.fields`. - Mapped `msg.scanCompleted.scan.application` to `additional.fields`. - Mapped `msg.scanCompleted.scan.startedTimestamp` to `additional.fields`. - Mapped `msg.scanStarted.scan.startedTimestamp` to `additional.fields`. - Mapped `msg.scanStarted.scan.scanURL` to `principal.url`. - Mapped `msg.scanCompleted.scan.scanURL` to `principal.url`. - Mapped `service` to `additional.fields`. - Mapped `scanCompleted.scan.id` to `additional.fields`. - Mapped `scanStarted.scan.id` to `additional.fields`. - Mapped `scanStarted.scan.hawkscanVersion` to `additional.fields`. - Mapped `scanCompleted.scan.hawkscanVersion` to `additional.fields`. - Mapped `scanStarted.scan.env` to `additional.fields`. - Mapped `scanCompleted.scan.env` to `additional.fields`. - Mapped `scanStarted.scan.status` to `additional.fields`. - Mapped `scanCompleted.scan.status` to `additional.fields`. - Mapped `scanStarted.scan.application` to `additional.fields`. - Mapped `scanCompleted.scan.application` to `additional.fields`. - Mapped `scanCompleted.scan.startedTimestamp` to `additional.fields`. - Mapped `scanStarted.scan.startedTimestamp` to `additional.fields`. - Mapped `scanStarted.scan.scanURL` to `principal.url`. - Mapped `scanCompleted.scan.scanURL` to `principal.url`.