Change log for TRENDMICRO_VISION_ONE_AUDIT

Date	Changes
2025-04-07	- Newly created parser. - "event.idm.read_only_udm.metadata.event_timestamp": Newly mapped "loggedDateTime" raw log field with "event.idm.read_only_udm.metadata.event_timestamp" UDM field. - "event.idm.read_only_udm.metadata.collected_timestamp": Newly mapped "ingestedDateTime" raw log field with "event.idm.read_only_udm.metadata.collected_timestamp" UDM field. - "event.idm.read_only_udm.principal.user.userid": Newly mapped "loggedUser" raw log field with "event.idm.read_only_udm.principal.user.userid" UDM field. - "event.idm.read_only_udm.principal.user.user_role": Newly mapped "loggedRole" raw log field with "event.idm.read_only_udm.principal.user.user_role" UDM field. - "event.idm.read_only_udm.additional.fields": Newly mapped "category", "activity", "accessType", "result" raw log fields with "event.idm.read_only_udm.additional.fields" UDM field. - "event.idm.read_only_udm.principal.resource.attribute.labels": Newly mapped "uuid" raw log field with "event.idm.read_only_udm.principal.resource.attribute.labels" UDM field. - "event.idm.read_only_udm.metadata.product_log_id": Newly mapped "uuid" raw log field with "event.idm.read_only_udm.metadata.product_log_id" UDM field.

Date

Changes

2025-04-07

- Newly created parser.
- "event.idm.read_only_udm.metadata.event_timestamp": Newly mapped "loggedDateTime" raw log field with "event.idm.read_only_udm.metadata.event_timestamp" UDM field.
- "event.idm.read_only_udm.metadata.collected_timestamp": Newly mapped "ingestedDateTime" raw log field with "event.idm.read_only_udm.metadata.collected_timestamp" UDM field.
- "event.idm.read_only_udm.principal.user.userid": Newly mapped "loggedUser" raw log field with "event.idm.read_only_udm.principal.user.userid" UDM field.
- "event.idm.read_only_udm.principal.user.user_role": Newly mapped "loggedRole" raw log field with "event.idm.read_only_udm.principal.user.user_role" UDM field.
- "event.idm.read_only_udm.additional.fields": Newly mapped "category", "activity", "accessType", "result" raw log fields with "event.idm.read_only_udm.additional.fields" UDM field.
- "event.idm.read_only_udm.principal.resource.attribute.labels": Newly mapped "uuid" raw log field with "event.idm.read_only_udm.principal.resource.attribute.labels" UDM field.
- "event.idm.read_only_udm.metadata.product_log_id": Newly mapped "uuid" raw log field with "event.idm.read_only_udm.metadata.product_log_id" UDM field.