We've reorganized our documentation navigation structure to align directly with your operational workflows. See the release notes and the walkthrough video for more information.

Change log for VMWARE_VSPHERE

Date	Changes
2026-06-03	- Fixed a typo in the mapping value, changing `NETWOK_CONNECTION` to the correct spelling `NETWORK_CONNECTION`.
2026-05-13	- Added a grok pattern on `message` data field to parse raw log fields. - `event.idm.read_only_udm.metadata.event_timestamp`: Newly mapped `timestamp` raw log field with `event.idm.read_only_udm.metadata.event_timestamp` UDM field. - `event.idm.read_only_udm.target.process.file.full_path`: Newly mapped `file_path` raw log field with `event.idm.read_only_udm.target.process.file.full_path` UDM field. - `event.idm.read_only_udm.security_result.detection_fields`: Newly mapped `api_invocations` raw log field with `event.idm.read_only_udm.security_result.detection_fields` UDM field. - `event.idm.read_only_udm.additional.fields`: Newly mapped `column2`, `login time`, `syslog_priority`, `user_level` raw log fields with `event.idm.read_only_udm.additional.fields` UDM field.
2025-05-15	- Added support for new format of SYSLOG + CSV logs. - event.idm.read_only_udm.network.session_id : Newly Mapped `session_id` raw log field with `event.idm.read_only_udm.network.session_id` UDM Field. - event.idm.read_only_udm.metadata.product_log_id : Newly Mapped `uuid` raw log field with `event.idm.read_only_udm.metadata.product_log_id` UDM Field. - event.idm.read_only_udm.principal.hostname : Newly Mapped `Hostname` raw log field with `event.idm.read_only_udm.principal.hostname` UDM Field. - event.idm.read_only_udm.principal.asset.hostname : Newly Mapped `Hostname` raw log field with `event.idm.read_only_udm.principal.asset.hostname` UDM Field. - event.idm.read_only_udm.metadata.description : Newly Mapped `msg` raw log field with `event.idm.read_only_udm.metadata.description` UDM Field. - event.idm.read_only_udm.additional.fields: Newly Mappeed `activityType` raw log field with `event.idm.read_only_udm.additional.fields` UDM Field. - event.idm.read_only_udm.additional.fields: Newly Mapped `Originator` raw log field with `event.idm.read_only_udm.additional.fields` UDM Field. - event.idm.read_only_udm.additional.fields: Newly Mapped `sub` raw log field with `event.idm.read_only_udm.additional.fields` UDM Field. - event.idm.read_only_udm.additional.fields: Newly Mapped `opID` raw log field with `event.idm.read_only_udm.additional.fields` UDM Field. - event.idm.read_only_udm.additional.fields: Newly Mapped `progress` raw log field with `event.idm.read_only_udm.additional.fields` UDM Field. - event.idm.read_only_udm.additional.fields: Newly Mapped `cls_simple_activity` raw log field with `event.idm.read_only_udm.additional.fields` UDM Field. - event.idm.read_only_udm.additional.fields: Newly Mapped `certVerificationStatus` raw log field with `event.idm.read_only_udm.additional.fields` UDM Field. - event.idm.read_only_udm.additional.fields: Newly Mapped `itemType` raw log field with `event.idm.read_only_udm.additional.fields` UDM Field. - event.idm.read_only_udm.additional.fields: Newly Mapped `vpxd` raw log field with `event.idm.read_only_udm.additional.fields` UDM Field. - event.idm.read_only_udm.additional.fields: Newly Mapped `securityCompliance` raw log field with `event.idm.read_only_udm.additional.fields` UDM Field. - event.idm.read_only_udm.additional.fields: Newly Mapped `logtype` raw log field with `event.idm.read_only_udm.additional.fields` UDM Field. - event.idm.read_only_udm.security_result.severity_details: Newly Mapped `severity` raw log field with `event.idm.read_only_udm.security_result.severity_details` UDM Field. - event.idm.read_only_udm.metadata.description: Newly Mapped `msg` raw log field with `event.idm.read_only_udm.metadata.description` UDM Field.
2024-10-29	- Newly created parser.