We've reorganized our documentation navigation structure to align directly with your operational workflows. See the release notes and the walkthrough video for more information.

Change log for CISCO_FWSM

Date	Changes
2025-10-17	Enhancement: - Added New GROK pattern for SYSLOG logs. - event.idm.read_only_udm.network.tls.version: Newly mapped `tls_version` raw log field with `event.idm.read_only_udm.network.tls.version` UDM field. - event.idm.read_only_udm.security_result.detection_fields: Newly mapped `packet_size`, `threshold` raw log field with `event.idm.read_only_udm.security_result.detection_fields` UDM field.
2025-04-17	Enhancement: - Added a GROK pattern for SYSLOG log. - Added a GROK pattern for field `decrip`. - event.idm.read_only_udm.principal.user.userid: Newly mapped src_fwuser raw log field with event.idm.read_only_udm.principal.user.userid UDM field. - event.idm.read_only_udm.target.user.userid: Newly mapped dst_fwuser raw log field with event.idm.read_only_udm.target.user.userid UDM field. - event.idm.read_only_udm.target.resource.attribute.labels: Newly mapped dst_mapped_interface raw log field with event.idm.read_only_udm.target.resource.attribute.labels UDM field. - event.idm.read_only_udm.target.resource.attribute.labels: Newly mapped dst_mapped_port raw log field with event.idm.read_only_udm.target.resource.attribute.labels UDM field. - event.idm.read_only_udm.target.resource.attribute.labels: Newly mapped dst_interface_name raw log field with event.idm.read_only_udm.target.resource.attribute.labels UDM field. - event.idm.read_only_udm.principal.resource.attribute.labels: Newly mapped src_interface_name raw log field with event.idm.read_only_udm.principal.resource.attribute.labels UDM field. - event.idm.read_only_udm.principal.resource.attribute.labels: Newly mapped src_mapped_port raw log field with event.idm.read_only_udm.principal.resource.attribute.labels UDM field. - event.idm.read_only_udm.principal.labels: Newly mapped src_mapped_interface raw log field with event.idm.read_only_udm.principal.labels UDM field. - event.idm.read_only_udm.network.ip_protocol: Newly mapped protocol raw log field with event.idm.read_only_udm.network.ip_protocol UDM field. - event.idm.read_only_udm.network.session_id: Newly mapped session_id raw log field with event.idm.read_only_udm.network.session_id UDM field. - event.idm.read_only_udm.about.resource.attribute.labels: Newly mapped `icmp_code`, `icmp_code_laddr`, `icmp_code_xlated`, `icmp_type`, `icmp_seq_num`, `interface_name`, and `tcp_flags` raw log field with event.idm.read_only_udm.about.resource.attribute.labels UDM field.
2023-05-05	- Newly created parser.