Stay organized with collections
Save and categorize content based on your preferences.
Change log for FORTINET_FORTIWEB
Date
Changes
2025-05-21
Enhancement:
- Added "gsub" for to convert "iframe src" to "iframe_src" to fix log parsing errors.
- Added IP Validation to parse the IP address from "src" raw log field.
- `event.idm.read_only_udm.additional.fields`: Newly mapped `matched_pattern` raw log field with `event.idm.read_only_udm.additional.fields` UDM field.
2025-02-06
Enhancement:
-Changed "devname" mapping from "principal.resource.name" to "intermediary.hostname".
2024-09-30
Enhancement:
- Added support to parse the new format of unparsed KV logs.
2024-01-09
- Added support for CEF format logs.
- Added a Grok pattern to match new format of CEF logs.
- Mapped "principal_hostnamne" to "principal.hostname".
- Mapped "principal.app" to "principal.application".
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-06-25 UTC."],[[["The FORTINET_FORTIWEB parser has undergone several enhancements and updates since its initial creation."],["Support for parsing new formats of unparsed KV logs was added on September 30, 2024."],["Support for CEF format logs was implemented on January 9, 2024, including a new Grok pattern and mapping adjustments."],["On February 6, 2025, the \"devname\" mapping was changed from \"principal.resource.name\" to \"intermediary.hostname\"."]]],[]]
