[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-29 UTC."],[[["\u003cp\u003eThe OSQUERY_EDR change log documents updates to the system, including field modifications and parser enhancements.\u003c/p\u003e\n"],["\u003cp\u003eOn May 1st, 2024, deprecated UDM fields were updated in the system.\u003c/p\u003e\n"],["\u003cp\u003eIn November 2023, mappings for 'principal/target.hostname' and 'principal/target.asset.hostname' were aligned.\u003c/p\u003e\n"],["\u003cp\u003eThe parser was updated on June 14th, 2023, to incorporate "parse_network_http_user_agent" and associated data fields.\u003c/p\u003e\n"]]],[],null,["Change log for OSQUERY_EDR\n\n| Date | Changes |\n|------------|------------------------------------------------------------------------------------------------------------|\n| 2024-05-01 | Updated the deprecated UDM fields. |\n| 2023-11-29 | Aligned 'principal/target.hostname' and 'principal/target.asset.hostname' mapping. |\n| 2023-06-14 | Updated the parser to include \"parse_network_http_user_agent\" to use \"Parsed User Agent\" and \"User Agent\". |\n| 2022-09-28 | Promoted parser from test to default. |"]]