Change log for ADMANAGER_PLUS
Date | Changes |
---|---|
2025-05-02 | Enhancement
- `event.idm.ready_only_udm.principal.user.personal_address.name`: Newly mapped `streetAddress` raw log field with `event.idm.ready_only_udm.principal.user.personal_address.name` UDM field. - `event.idm.ready_only_udm.principal.user.office_address.name`: Newly mapped `physicalDeliveryOfficeName` raw log field with `event.idm.ready_only_udm.principal.user.office_address.name` UDM field. - `event.idm.ready_only_udm.principal.user.attribute.labels`: Newly mapped `postalCode`, `countryCode` raw log field with `event.idm.ready_only_udm.principal.user.attribute.labels` UDM field. - `event.idm.ready_only_udm.principal.user.company_name`: Newly mapped `company` raw log field with `event.idm.ready_only_udm.principal.user.company_name` UDM field. - `event.idm.ready_only_udm.principal.user.department`: Newly mapped `department` raw log field with `event.idm.ready_only_udm.principal.user.department` UDM field. - `event.idm.ready_only_udm.security_result.detection_fields`: Newly mapped `accountExpires`, `ou_label_1`, `ou_label_2`, `ou_label_3`, `dc_label_1`, `dc_label_2`, `cn_label_1`, `cn_label_2`, `primary_dc_label_1`, `primary_dc_label_2`, `manager_cn_value1` manager_ou_value1`, `manager_ou_value2`, `manager_ou_value3`, `manager_dc_value1` and `manager_dc_value2` raw log field with `event.idm.ready_only_udm.security_result.detection_fields` UDM field. - `event.idm.ready_only_udm.principal.user.first_name`: Newly mapped `givenName` raw log field with `event.idm.ready_only_udm.user.first_name` UDM field. - `event.idm.ready_only_udm.additional.fields`: Newly mapped `sn`, `st`, `l` raw log field with `event.idm.ready_only_udm.additional.fields` UDM field. |
2025-04-09 | Enhancement
- Modified the Grok pattern to parse the unparsed logs. - event.idm.ready_only_udm.principal.url: Newly mapped `wWWHomePage` raw log field with `event.idm.ready_only_udm.principal.url` UDM field. - event.idm.ready_only_udm.principal.user.phone_numbers: Newly mapped `homePhone` raw log field with `event.idm.ready_only_udm.principal.user.phone_numbers` UDM field. - event.idm.ready_only_udm.principal.location.city: Newly mapped `co` raw log field with `event.idm.ready_only_udm.principal.location.city` UDM field. |
2025-03-19 | Enhancement
- Added gsub support for month names to parse the unparsed logs. |
2025-02-17 | Enhancement
- Newly created parser for ADMANAGER_PLUS. |