Change log for SLACK_AUDIT
| Date | Changes |
|---|---|
| 2025-03-28 | Enhancement:
- The Gsub pattern was updated to "\\r\\n" from "\r\n" to fix the problem of "rn" being stripped from the generated output. - A conversion block was added to explicitly convert the details.type field to a string. - Mapped "actor.user.id" to "principal.user.userid". - Mapped "details.url_private" to "target.url". - Mapped "details.shared_with.channel_id" "target.labels". - Mapped "details.reason" to "security_result.description". - Mapped "details.previous_ip_address" to "principal.labels". - Mapped "details.previous_ua" to "principal.labels". |
| 2023-10-27 | Enhancement:
- Mapped "details.reason" to "security_result.description". |
| 2022-08-03 | Enhancement:
- Modified mapping for "prin_ip" from "principal.nat_ip" to "principal.ip". |
| 2022-04-07 | - Corrected mapping for product_object_id.
- Corrected the user mappings for second log format. |