[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-04-02 UTC."],[[["This changelog details updates for CISCO_PRIME, specifically addressing bug fixes related to event type classifications."],["Several mappings have been implemented to improve data organization, including mapping `principal_port` to `principal.port` and `ip_address` to `principal.asset.ip`."],["Updates have also mapped various fields to `principal.ip` and `principal.asset.ip`, such as `device_ip`, `client_ip_address`, and `principal_ip`."],["Additional field mappings include `Type` to `metadata.product_event_type`, `dst_user` to `target.user.userid`, and `sec_description` to `security_result.description`."],["The changes on January 26, 2024, involved integrating Grok patterns to reduce `GENERIC_EVENT` event types."]]],[]]
