We've reorganized our documentation navigation structure to align directly with your operational workflows. See the release notes and the walkthrough video for more information.

Change log for ZSCALER_FIREWALL

Date	Changes
2026-05-28	- security_result.detection_fields[fwd_type]: Newly mapped `fwd_type` raw log field with `security_result.detection_fields[fwd_type]` UDM field.
2026-01-07	- Updated the field mapping for the Zscaler Firewall parser. - Please refer to the parser documentation page for information regarding the updated UDM mappings - https://docs.cloud.google.com/chronicle/docs/ingestion/default-parsers/zscaler-firewall#udm_mapping_delta
2025-09-26	Improved error handling to cover various edge cases across multiple scenarios.
2025-05-08	- Promoted ZSCALER_FIREWALL Premium parser to default. You can see full details in the parser configuration page - https://cloud.google.com/chronicle/docs/ingestion/default-parsers/ingest-zscaler-logs