Stay organized with collections
Save and categorize content based on your preferences.
Change log for MCAFEE_WEBPROXY
Date
Changes
2025-01-30
Enhancement:
- Added support for parsing previously unparsed syslog logs.
2024-12-19
Bug-Fix:
- Added support to parse unparsed syslog logs.
- Changed the mapping of "metadata.event_type" from "STATUS_UPDATE" to "NETWORK_HTTP".
2024-10-24
Bug-Fix:
- Added support to parse unparsed logs.
2023-06-17
Enhancement-
- Mapped "sr_bytes" to "network.send_bytes".
- Mapped "user" to "principal.user.userid".
- Mapped "client_ip" to "principal.ip".
2023-05-31
Bug-fix-
- Added Grok pattern to parse logs failing due to extra '-' in CSV format logs.
2023-01-27
Enhancement-
- Mapped "requested_host" and "requested_path" to "target.url".
- Mapped "username" to "principal.user.userid".
- Mapped "destination_ip" to "target.ip".
- Mapped "destination_port" to "target.port".
- Mapped "client_ip" to "intermediary.ip".
- Mapped 'user_agent' to 'network.http.parsed_user_agent'.
2023-01-16
Enhancement-
- Added grok pattern for unparsed log.
- Mapped "target_ip" to "target.ip".
- Mapped "response_code" to "network.http.response_code".
- Mapped "category_details" to "security_result.category_details".
- Mapped "risk" to "security_result.category_details".
2022-09-21
Merged customer specific parser to default. Added Mapping for unparsed log.
- Added on error check for "kv_entry.server_ip","kv_entry.method",kv_entry.src_ip","kv_entry.server_ip","kv_entry.url_port","kv_entry.url","kv_entry.status_code"
"kv_entry.auth_user","kv_entry.host","kv_entry.user_agent","kv_entry.bytes_from_client","kv_entry.bytes_to_client,"kv_entry.rep_level,"kv_entry.block_reason",kv_entry.categories","kv_entry.application_name","kv_entry.block_res"
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-03-13 UTC."],[[["Recent updates have enhanced the parsing of previously unparsed syslog logs, as indicated by the changes on 2025-01-30, 2024-12-19, and 2024-10-24."],["Various fields have been mapped to standardized names for improved data consistency, including mappings for \"sr_bytes\" to \"network.send_bytes\", \"user\" to \"principal.user.userid\", and \"client_ip\" to \"principal.ip\" on 2023-06-17."],["Mappings were added to assign \"requested_host\" and \"requested_path\" to \"target.url\", \"username\" to \"principal.user.userid\", and several other key fields to standardized locations on 2023-01-27."],["Grok patterns were implemented to address issues with parsing logs, including logs with extra '-' in CSV format, and general unparsed logs on 2023-05-31 and 2023-01-16."],["A customer-specific parser was merged into the default settings, adding error checks and mappings for numerous log fields, ensuring comprehensive parsing capability on 2022-09-21."]]],[]]
