[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-29 UTC."],[[["\u003cp\u003eThe BRO_JSON parser has been updated to address deprecated UDM fields as of May 1, 2024.\u003c/p\u003e\n"],["\u003cp\u003eOn January 31, 2024, enhancements were implemented to manage extra spaces within the \u003ccode\u003eregex\u003c/code\u003e condition when configuring log types.\u003c/p\u003e\n"],["\u003cp\u003eField mapping for 'principal/target.hostname' and 'principal/target.asset.hostname' was aligned on November 29, 2023.\u003c/p\u003e\n"],["\u003cp\u003eAs of October 4, 2023, mappings for "network.tls.certificate.md5", "network.tls.certificate.sha1", and "network.tls.certificate.sha256" were introduced.\u003c/p\u003e\n"],["\u003cp\u003eThe BRO_JSON parser became the default parser starting September 28, 2022, with field mapping changes detailed in the provided link.\u003c/p\u003e\n"]]],[],null,["# Change log for BRO_JSON\n======================="]]
