Change log for KUBERNETES_NODE
| Date | Changes |
|---|---|
| 2025-08-20 | target.namespace target.namespace: Removed mapping of `protoPayload.request.metadata.namespace` from `target.namespace` UDM field and mapped to `additional.fields` for the k8s_cluster `resource.type` in order to prevent the feed namespace from being overwritten by the prebuilt parser. target.namespace: Removed mapping of `labels.destination_namespace` from `target.namespace` for the UDM field and mapped to `additional.fields` for the k8s_container `resource.type` in order to prevent the feed namespace from being overwritten by the prebuilt parser. principal.namespace: Removed mapping of `labels.source_namespace` from `principal.namespace` for the UDM field and mapped to `additional.fields` for the k8s_container `resource.type` in order to prevent the feed namespace from being overwritten by the prebuilt parser. principal.namespace: Removed mapping of `jsonPayload.src.namespace` from `principal.namespace` for the UDM field and mapped to `additional.fields` for the k8s_node `resource.type` in order to prevent the feed namespace from being overwritten by the prebuilt parser. principal.namespace: Removed mapping of `jsonPayload.src.pod_namespace` from `principal.namespace` for the UDM field and mapped to `additional.fields` for the k8s_node `resource.type` in order to prevent the feed namespace from being overwritten by the prebuilt parser. target.namespace: Removed mapping of `jsonPayload.dest.pod_namespace` from `target.namespace` for the UDM field and mapped to `additional.fields` for the k8s_node `resource.type` in order to prevent the feed namespace from being overwritten by the prebuilt parser. target.namespace: Removed mapping of `jsonPayload.dest.namespace` from `target.namespace` for the UDM field and mapped to `additional.fields` for the k8s_node `resource.type` in order to prevent the feed namespace from being overwritten by the prebuilt parser. |
| 2025-07-29 | `generic_node` |
| 2024-10-11 | Added Support jsonPayload.authority and jsonPayload.path to Kubernetes default parser. |
| 2024-05-22 | Updated parser to map "security_result.action" UDM field conditionally. |
| 2024-05-01 | Added additional mappings for deprecated "noun.labels". |
| 2024-05-01 | Added additional mappings for deprecated "noun.labels". |
| 2024-04-24 | Added empty check for 'role.description' and 'protoPayload.request.roleRef.name' field. |
| 2024-01-03 | Added support of additional UDM fields for NGINX logs based on the "textPayload" field. |
| 2023-12-13 | Added mapping for additional raw log fields. |
| 2023-11-29 | Added mapping for vulnerability fields. Aligned 'principal/target.hostname' and 'principal/target.asset.hostname' mapping. |
| 2023-08-16 | Modify the parser to support dynamic labels. Added support to parse the log field "jsonPayload.httpRequest.x-forwarded-for". |
| 2023-06-28 | Promoted KUBERNETES_NODE parser to default. For the field mapping reference, see Collect Kubernetes Node logs. |