Change log for SYMANTEC_VIP
| Date | Changes |
|---|---|
| 2023-03-03 |
Enhancement- Mapped userid to target.user.userid for the logs that were not parsed already.- Mapped event_type to USER_LOGIN for the logs where userid is presentelse if principal.hostname is present then mapped event_type to STATUS_UPDATE,else mapped it to GENERIC_EVENT.- Parsed the logs that were dropped initially. |
| 2022-08-03 |
BugFix - Added the grok pattern to handle the unparsed logs having log_type remove_credentials.
|