Stay organized with collections
Save and categorize content based on your preferences.
Change log for CISCO_VCS
Date
Changes
2025-08-22
- A new grok pattern was added to parse logs that use the ISO8601 timestamp format.
- event.idm.read_only_udm.metadata.event_timestamp: Newly mapped timestamp raw log field with event.idm.read_only_udm.metadata.event_timestamp UDM field.
- event.idm.read_only_udm.principal.asset.hostname: Newly mapped principal_hostname raw log field with event.idm.read_only_udm.principal.asset.hostname UDM field.
- event.idm.read_only_udm.principal.asset.ip: Newly mapped Src-ip, Local-ip raw log field(s) with event.idm.read_only_udm.principal.asset.ip UDM field.
- event.idm.read_only_udm.target.asset.ip: Newly mapped Dst-ip raw log field with event.idm.read_only_udm.target.asset.ip UDM field.
- event.idm.read_only_udm.additional.fields: Dynamically maps key-value pairs from the addition map. The Msg-Hash, From-Tag, Call-ID, CSeq, To-Tag and To raw log fields are mapped as key-value pairs.
- Added on_error checks to all mutate, grok, kv, and date filters to prevent parsing failures from stopping the entire pipeline.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-29 UTC."],[[["\u003cp\u003eA parser for CISCO_VCS has been newly created.\u003c/p\u003e\n"],["\u003cp\u003eThe parser creation was recorded in the change log on June 12, 2023.\u003c/p\u003e\n"]]],[],null,["# Change log for CISCO_VCS\n========================"]]
