Change log for SIGNAL_SCIENCES_WAF
| Date | Changes |
|---|---|
| 2024-05-13 | Enhancement:
- Added support to handle array of JSON logs. |
| 2023-11-22 | Enhancement:
- Added a Grok pattern to validate "remoteIP". - Added on_error function for fields "tag.detector", "tag.link", "tag.location", "tag.redaction", "tag.type", and "tag.value1". |
| 2023-09-16 | Bug-Fix:
- Added a condition check to avoid mapping negative values to "network.received_bytes" and "network.http.response_code". |
| 2023-02-21 | Bug-Fix
- Added gsub to fix the issue of userid and username not displayed in the udm mapping of "target.user.user_display_name" and "target.user.userid", respectively. |
| 2022-11-25 | Enhancement
- Enhanced the parser to support new log format. |
| 2022-11-03 | Enhancement
- Mapped "created" to "metadata.timestamp". - Checked for not null conditions for following: "remoteIP", "responseSize", "uri", "remoteHostname","serverName","userAgent","method","remoteCountryCode","id" prior mapping to udm. - Mapped "eventType" to "metadata.product_event_type". - Mapped "message_data" to "metadata.description". - Mapped "username" to "target.user.user_display_name". - Mapped "userid" to "target.user.userid". - Mapped "attachments.Fields.Title" , "attachments.Fields.Value" to "metadata.ingestion_labels" key and value. - Mapped "msgData.detailLink" to "network.http.referral_url". - Mapped "msgData.name" to "target.resource.name". - Mapped "msgData.changes" to "target.resource.attribute.labels". - Mapped "msgData.reason" to "security_result.summary". - Mapped "msgData.conditions" to "security_result.description". - Mapped "msgData.sites" to "network.http.user_agent". |