Stay organized with collections
Save and categorize content based on your preferences.
Change log for SHIBBOLETH_IDP
Date
Changes
2024-11-14
Enhancement:
- Changed the Grok pattern field name from "USERNAME" to "DATA" to map "userid" to "principal.user.userid".
2024-08-05
Enhancement:
- Added Grok patterns to parse a new format of logs.
2024-03-11
Enhancement:
- Added support for JSON format logs.
- Added a Grok pattern to parse "dns" type logs.
- Mapped "createdDateTime" to "metadata.event_timestamp".
- Mapped "id" to "metadata.product_log_id".
- Mapped "ipAddress" and "ip" to "principal.ip".
- Mapped "location.city" to "principal.location.city"
- Mapped "location.state" to "principal.location.state".
- Mapped "location.country" to "principal.location.country".
- Mapped "location.geoCoordinates.latitude" to "principal.location.region_latitude".
- Mapped "location.geoCoordinates.longitude" to "principal.location.region_longitude".
- Mapped "userDisplayName" to "principal.user.user_display_name".
- Mapped "resourceDisplayName" to "target.resource.name".
- Mapped "resourceId" to "target.resource.product_object_id".
- Mapped "deviceDetail.displayName" to "principal.asset.hardware".
- Mapped "deviceDetail.browser" to "network.http.user_agent".
- Mapped "deviceDetail.operatingSystem" to "principal.platform_version".
- Mapped "deviceDetail.operatingSystem" to "principal.platform".
- Mapped "record_name" to "dns.question.name".
- Mapped "record_type" to "dns.question.class".
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-29 UTC."],[[["\u003cp\u003eThe SHIBBOLETH_IDP log processing has been enhanced to support new log formats, including JSON.\u003c/p\u003e\n"],["\u003cp\u003eGrok patterns have been updated and added to parse various types of logs, such as "dns" logs.\u003c/p\u003e\n"],["\u003cp\u003eMultiple fields from the logs have been mapped to standardized fields, including user information, resource details, and network data.\u003c/p\u003e\n"],["\u003cp\u003eThe field previously known as "USERNAME" in the Grok pattern is now "DATA" for mapping the "userid" to "principal.user.userid".\u003c/p\u003e\n"]]],[],null,["# Change log for SHIBBOLETH_IDP\n============================="]]
