We've reorganized our documentation navigation structure to align directly with your operational workflows. See the release notes and the walkthrough video for more information.

Change log for CA_SSO_WEB

Date	Changes
2026-04-17	Enhancement: - Added a grok pattern to parse new format of syslogs. - `event.idm.read_only_udm.metadata.product_log_id`: Newly mapped `prod_log_id` raw log field to `event.idm.read_only_udm.metadata.product_log_id` UDM field. - `event.idm.read_only_udm.security_result.priority_details`: Newly mapped `syslog_priority` raw log field to `event.idm.read_only_udm.security_result.priority_details` UDM field. - `event.idm.read_only_udm.intermediary.ip` and `event.idm.read_only_udm.intermediary.asset.ip`: Newly mapped `syslog_host` to `event.idm.read_only_udm.intermediary.ip` and `event.idm.read_only_udm.intermediary.asset.ip` when `syslog_host` is an IP address. - `event.idm.read_only_udm.intermediary.hostname` and `event.idm.read_only_udm.intermediary.asset.hostname`: Newly mapped `syslog_host` to `event.idm.read_only_udm.intermediary.hostname` and `event.idm.read_only_udm.intermediary.asset.hostname` when `syslog_host` is not an IP address. - `event.idm.read_only_udm.target.application`: Newly mapped `target_app` raw log field to `event.idm.read_only_udm.target.application` UDM field.
2024-06-25	Enhancement: - Added a Grok pattern to parse newly ingested syslog format.
2022-08-08	Enhancement - - Added the header. - Added conditional check and grok pattern for the field `ClientIp` mapped to `principal.ip`. - Added conditional checks for the fields : - `Action` mapped to `network.http.method`. - `AgentName` mapped to `target.hostname`. - `sm_user` mapped to `target.user.email_addresses` - `sm_group` mapped to `target.user.group_identifiers`.