Change log for TRENDMICRO_VISION_ONE_CONTAINER_VULNERABILITIES

Date	Changes
2025-04-07	- Newly created parser. - "event.idm.read_only_udm.metadata.event_timestamp": Newly mapped "scantime" raw log field with "event.idm.read_only_udm.metadata.event_timestamp" UDM field. - "event.idm.read_only_udm.metadata.product_log_id": Newly mapped "scanID" raw log field with "event.idm.read_only_udm.metadata.product_log_id" UDM field. - "event.idm.read_only_udm.principal.asset.vulnerabilities.name": Newly mapped "vulnerabilityname" raw log field with "event.idm.read_only_udm.principal.asset.vulnerabilities.name" UDM field. - "event.idm.read_only_udm.principal.asset.vulnerabilities.description": Newly mapped "description" raw log field with "event.idm.read_only_udm.principal.asset.vulnerabilities.description" UDM field. - "event.idm.read_only_udm.principal.asset.vulnerabilities.cve_id": Newly mapped "cverecord.id" raw log field with "event.idm.read_only_udm.principal.asset.vulnerabilities.cve_id" UDM field. - "event.idm.read_only_udm.additional.fields": Newly mapped "clusterID", "clusterName", "imageID", "registry", "repository" raw log fields with "event.idm.read_only_udm.additional.fields" UDM field.

Date

Changes

2025-04-07

- Newly created parser.
- "event.idm.read_only_udm.metadata.event_timestamp": Newly mapped "scantime" raw log field with "event.idm.read_only_udm.metadata.event_timestamp" UDM field.
- "event.idm.read_only_udm.metadata.product_log_id": Newly mapped "scanID" raw log field with "event.idm.read_only_udm.metadata.product_log_id" UDM field.
- "event.idm.read_only_udm.principal.asset.vulnerabilities.name": Newly mapped "vulnerabilityname" raw log field with "event.idm.read_only_udm.principal.asset.vulnerabilities.name" UDM field.
- "event.idm.read_only_udm.principal.asset.vulnerabilities.description": Newly mapped "description" raw log field with "event.idm.read_only_udm.principal.asset.vulnerabilities.description" UDM field.
- "event.idm.read_only_udm.principal.asset.vulnerabilities.cve_id": Newly mapped "cverecord.id" raw log field with "event.idm.read_only_udm.principal.asset.vulnerabilities.cve_id" UDM field.
- "event.idm.read_only_udm.additional.fields": Newly mapped "clusterID", "clusterName", "imageID", "registry", "repository" raw log fields with "event.idm.read_only_udm.additional.fields" UDM field.