Change log for TENABLE_OT
| Date | Changes |
|---|---|
| 2025-11-25 |
- event.idm.read_only_udm.intermediary.hostname: Newly mapped inter_host raw log field with event.idm.read_only_udm.intermediary.hostname UDM field.- Updated grok pattern to support parsing of hostname from raw logs. - Added mutate filter to handle escaped characters in the message field. |
| 2025-10-30 |
- event.idm.read_only_udm.intermediary.ip: Newly mapped inter_ip raw log field with event.idm.read_only_udm.intermediary.ip UDM field.- event.idm.read_only_udm.principal.mac: Newly mapped smac raw log field with event.idm.read_only_udm.principal.mac UDM field.- event.idm.read_only_udm.principal.asset.mac: Newly mapped smac raw log field with event.idm.read_only_udm.principal.asset.mac UDM field.
|
| 2024-04-29 | - Newly created parser. |