Change log for CISCO_FWSM

Date	Changes
2025-04-17	Enhancement: - Added a GROK pattern for SYSLOG log. - Added a GROK pattern for field "decrip". - event.idm.read_only_udm.principal.user.userid: Newly mapped src_fwuser raw log field with event.idm.read_only_udm.principal.user.userid UDM field. - event.idm.read_only_udm.target.user.userid: Newly mapped dst_fwuser raw log field with event.idm.read_only_udm.target.user.userid UDM field. - event.idm.read_only_udm.target.resource.attribute.labels: Newly mapped dst_mapped_interface raw log field with event.idm.read_only_udm.target.resource.attribute.labels UDM field. - event.idm.read_only_udm.target.resource.attribute.labels: Newly mapped dst_mapped_port raw log field with event.idm.read_only_udm.target.resource.attribute.labels UDM field. - event.idm.read_only_udm.target.resource.attribute.labels: Newly mapped dst_interface_name raw log field with event.idm.read_only_udm.target.resource.attribute.labels UDM field. - event.idm.read_only_udm.principal.resource.attribute.labels: Newly mapped src_interface_name raw log field with event.idm.read_only_udm.principal.resource.attribute.labels UDM field. - event.idm.read_only_udm.principal.resource.attribute.labels: Newly mapped src_mapped_port raw log field with event.idm.read_only_udm.principal.resource.attribute.labels UDM field. - event.idm.read_only_udm.principal.labels: Newly mapped src_mapped_interface raw log field with event.idm.read_only_udm.principal.labels UDM field. - event.idm.read_only_udm.network.ip_protocol: Newly mapped protocol raw log field with event.idm.read_only_udm.network.ip_protocol UDM field. - event.idm.read_only_udm.network.session_id: Newly mapped session_id raw log field with event.idm.read_only_udm.network.session_id UDM field. - event.idm.read_only_udm.about.resource.attribute.labels: Newly mapped "icmp_code", "icmp_code_laddr", "icmp_code_xlated", "icmp_type", "icmp_seq_num", "interface_name", and "tcp_flags" raw log field with event.idm.read_only_udm.about.resource.attribute.labels UDM field.
2023-05-05	- Newly created parser.

Date

Changes

2025-04-17

Enhancement:
- Added a GROK pattern for SYSLOG log.
- Added a GROK pattern for field "decrip".
- event.idm.read_only_udm.principal.user.userid: Newly mapped src_fwuser raw log field with event.idm.read_only_udm.principal.user.userid UDM field.
- event.idm.read_only_udm.target.user.userid: Newly mapped dst_fwuser raw log field with event.idm.read_only_udm.target.user.userid UDM field.
- event.idm.read_only_udm.target.resource.attribute.labels: Newly mapped dst_mapped_interface raw log field with event.idm.read_only_udm.target.resource.attribute.labels UDM field.
- event.idm.read_only_udm.target.resource.attribute.labels: Newly mapped dst_mapped_port raw log field with event.idm.read_only_udm.target.resource.attribute.labels UDM field.
- event.idm.read_only_udm.target.resource.attribute.labels: Newly mapped dst_interface_name raw log field with event.idm.read_only_udm.target.resource.attribute.labels UDM field.
- event.idm.read_only_udm.principal.resource.attribute.labels: Newly mapped src_interface_name raw log field with event.idm.read_only_udm.principal.resource.attribute.labels UDM field.
- event.idm.read_only_udm.principal.resource.attribute.labels: Newly mapped src_mapped_port raw log field with event.idm.read_only_udm.principal.resource.attribute.labels UDM field.
- event.idm.read_only_udm.principal.labels: Newly mapped src_mapped_interface raw log field with event.idm.read_only_udm.principal.labels UDM field.
- event.idm.read_only_udm.network.ip_protocol: Newly mapped protocol raw log field with event.idm.read_only_udm.network.ip_protocol UDM field.
- event.idm.read_only_udm.network.session_id: Newly mapped session_id raw log field with event.idm.read_only_udm.network.session_id UDM field.
- event.idm.read_only_udm.about.resource.attribute.labels: Newly mapped "icmp_code", "icmp_code_laddr", "icmp_code_xlated", "icmp_type", "icmp_seq_num", "interface_name", and "tcp_flags" raw log field with event.idm.read_only_udm.about.resource.attribute.labels UDM field.

2023-05-05

- Newly created parser.