Stay organized with collections
Save and categorize content based on your preferences.
Change log for MICROSOFT_GRAPH_ACTIVITY_LOGS
Date
Changes
2024-10-08
Enhancement:
- Changed the mapping of "properties.requestUri" from "network.http.referral_url" to "target.url".
2024-09-05
Enhancement:
- Removed mapping of "callerIpAddress" from "principal.ip" and "principal.asset.ip".
- Mapped "properties.C_Idtyp" to "principal.user.account_type".
- Changed mapping of "properties.appId" from "target.resource.product_object_id" to "principal.resource.product_object_id".
- Changed mapping of "properties.requestUri" from "target.url" to "network.http.referral_url".
- Changed mapping of "properties.servicePrincipalId" and "properties.userId" from "principal.user.userid" to "principal.user.product_object_id".
2024-07-09
Enhancement:
- Added support for a new type of JSON logs.
2024-05-27
- Set "metadata.vendor_name" as "Microsoft" and "metadata.product_name" as "Microsoft Graph".
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-03-13 UTC."],[[["This change log documents updates to the MICROSOFT_GRAPH_ACTIVITY_LOGS parser, including enhancements and new features."],["The parser now supports a new type of JSON logs as of July 9, 2024."],["Several mapping changes were implemented on September 5, 2024, including adjustments to properties like \"requestUri,\" \"appId,\" and fields related to user and service principal IDs."],["On October 8, 2024, the mapping of \"properties.requestUri\" was changed from \"network.http.referral_url\" to \"target.url\"."],["The parser's metadata was updated on May 27, 2024, setting the vendor name to \"Microsoft\" and the product name to \"Microsoft Graph\"."]]],[]]
