Change log for FORTINET_WEBPROXY

Date	Changes
2025-06-24	Enhancement: - "event.idm.read_only_udm.additional.fields": Newly mapped "subtype" raw log field with "event.idm.read_only_udm.additional.fields" UDM field. - "event.idm.read_only_udm.additional.fields": Newly mapped "catdesc" raw log field with "event.idm.read_only_udm.additional.fields" UDM field. - "event.idm.read_only_udm.network.sent_bytes": Newly mapped "sentbyte" raw log field with "event.idm.read_only_udm.network.sent_bytes" UDM field. - "event.idm.read_only_udm.network.received_bytes": Newly mapped "rcvdbyte" raw log field with "event.idm.read_only_udm.network.received_bytes" UDM field. - "event.idm.read_only_udm.network.http.referral_url": Newly mapped "referralurl" raw log field with "event.idm.read_only_udm.network.http.referral_url" UDM field. - "event.idm.read_only_udm.network.http.method": Newly mapped "httpmethod" raw log field with "event.idm.read_only_udm.network.http.method" UDM field. - "event.idm.read_only_udm.additional.fields": Newly mapped "reqtype" raw log field with "event.idm.read_only_udm.additional.fields" UDM field. - "event.idm.read_only_udm.security_result.detection_fields": Newly mapped "ratemethod" raw log field with "event.idm.read_only_udm.security_result.detection_fields" UDM field. - "event.idm.read_only_udm.security_result.detection_fields": Newly mapped "cat" raw log field with "event.idm.read_only_udm.security_result.detection_fields" UDM field. - "event.idm.read_only_udm.principal.user.userid": Removed mapping for "vd" raw log field with "event.idm.read_only_udm.principal.user.userid" UDM field.Because "event.idm.read_only_udm.principal.user.userid" UDM event is already mapped to "user" ,this caused the "vd" mapping to be overwritten. - "event.idm.read_only_udm.principal.user.user_display_name": Mapped "vd" raw log field with "event.idm.read_only_udm.principal.user.user_display_name" UDM field. - "event.idm.read_only_udm.security_result.detection_fields": Updated the mapping for the "policyid" raw log field to merge it as a key-value pair with "PolicyID" as the key and the "policyid" value as the value, using the "policyid_label" variable. - "event.idm.read_only_udm.network.direction": Updated to include mapping for "outgoing" and "outbound" values to "OUTBOUND", in existing raw log field "direction".
2025-01-07	Enhancement: - Newly created parser.

Date

Changes

2025-06-24

Enhancement:
- "event.idm.read_only_udm.additional.fields": Newly mapped "subtype" raw log field with "event.idm.read_only_udm.additional.fields" UDM field.
- "event.idm.read_only_udm.additional.fields": Newly mapped "catdesc" raw log field with "event.idm.read_only_udm.additional.fields" UDM field.
- "event.idm.read_only_udm.network.sent_bytes": Newly mapped "sentbyte" raw log field with "event.idm.read_only_udm.network.sent_bytes" UDM field.
- "event.idm.read_only_udm.network.received_bytes": Newly mapped "rcvdbyte" raw log field with "event.idm.read_only_udm.network.received_bytes" UDM field.
- "event.idm.read_only_udm.network.http.referral_url": Newly mapped "referralurl" raw log field with "event.idm.read_only_udm.network.http.referral_url" UDM field.
- "event.idm.read_only_udm.network.http.method": Newly mapped "httpmethod" raw log field with "event.idm.read_only_udm.network.http.method" UDM field.
- "event.idm.read_only_udm.additional.fields": Newly mapped "reqtype" raw log field with "event.idm.read_only_udm.additional.fields" UDM field.
- "event.idm.read_only_udm.security_result.detection_fields": Newly mapped "ratemethod" raw log field with "event.idm.read_only_udm.security_result.detection_fields" UDM field.
- "event.idm.read_only_udm.security_result.detection_fields": Newly mapped "cat" raw log field with "event.idm.read_only_udm.security_result.detection_fields" UDM field.
- "event.idm.read_only_udm.principal.user.userid": Removed mapping for "vd" raw log field with "event.idm.read_only_udm.principal.user.userid" UDM field.Because "event.idm.read_only_udm.principal.user.userid" UDM event is already mapped to "user" ,this caused the "vd" mapping to be overwritten.
- "event.idm.read_only_udm.principal.user.user_display_name": Mapped "vd" raw log field with "event.idm.read_only_udm.principal.user.user_display_name" UDM field.
- "event.idm.read_only_udm.security_result.detection_fields": Updated the mapping for the "policyid" raw log field to merge it as a key-value pair with "PolicyID" as the key and the "policyid" value as the value, using the "policyid_label" variable.
- "event.idm.read_only_udm.network.direction": Updated to include mapping for "outgoing" and "outbound" values to "OUTBOUND", in existing raw log field "direction".

2025-01-07

Enhancement:
- Newly created parser.