Stay organized with collections
Save and categorize content based on your preferences.
Change log for OPENAM
Date
Changes
2024-11-28
Enhancement:
- Added support for new pattern of JSON logs.
- Added support for new pattern of SYSLOG logs.
2024-02-09
Enhancement:
- When "eventName" is "AM-SESSION-MAX_TIMED_OUT", then set "metadata.event_type" to "USER_LOGOUT".
2024-02-06
- Added support for new pattern of JSON logs.
- When "principal" is present and "metadata.event_type" is "GENERIC_EVENT", then set "metadata.event_type" to "STATUS_UPDATE".
- When "eventName" is "AM-ACCESS-OUTCOME", then mapped "http.request.headers.host.0" to "tatget.hostname".
- When "eventName" is "AM-ACCESS-OUTCOME", then mapped "http.request.headers.user-agent.0" to "network.http.user_agent".
- When "eventName" is "AM-ACCESS-OUTCOME", then mapped "http.request.path" to "target.url".
- When "eventName" is "AM-ACCESS-OUTCOME", then mapped "http.request.method" to "network.http.method".
- When "http.request.secure" is "true", then set "network.application_protocol" to "HTTPS".
- When "http.request.secure" is not "true", then set "network.application_protocol" to "HTTP".
- Aligned "principal.ip", "target.ip", "target.hostname" to "principal.asset.ip", "target.asset.ip", "target.asset.hostname".
2023-05-19
- Mapped "extensions.auth.type" to "SSO" where "eventName" indicates login and logout events.
- Added check to "server.ip" prior mapping to UDM.
2023-05-15
- Added support for JSON format logs.
2022-12-26
Bug - The field 'info.ipAddress' is mapped to 'principal.ip'.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-03-13 UTC."],[[["Recent enhancements include support for new JSON and SYSLOG log patterns, improving log processing capabilities."],["The system now maps specific \"eventName\" values, such as \"AM-SESSION-MAX_TIMED_OUT\", to corresponding \"metadata.event_type\" values like \"USER_LOGOUT\"."],["Various mappings for \"AM-ACCESS-OUTCOME\" events have been added, associating HTTP request details with target and network properties."],["The application protocol is now automatically set to \"HTTPS\" or \"HTTP\" based on the \"http.request.secure\" field."],["\"principal.ip\", \"target.ip\", and \"target.hostname\" fields are now aligned to \"principal.asset.ip\", \"target.asset.ip\", and \"target.asset.hostname\", respectively, for consistency."]]],[]]
