Change log for FASTLY_CDN
| Date | Changes |
|---|---|
| 2026-01-02 | Enhancement:
- Added logic to handle `\r\n` characters in the raw JSON message. - Updated `metadata.event_type` to `NETWORK_CONNECTION` when target and principal/target details are available. - Enhanced `protocol` field parsing using grok to extract the base protocol name. - `event.idm.read_only_udm.metadata.event_timestamp`: Newly mapped `timestamp` raw log field to `event.idm.read_only_udm.metadata.event_timestamp`. - `event.idm.read_only_udm.metadata.product_event_type`: Newly mapped `service_id` raw log field to `event.idm.read_only_udm.metadata.product_event_type`. - `event.idm.read_only_udm.network.session_duration.seconds`: Newly mapped `time_elapsed` raw log field to `event.idm.read_only_udm.network.session_duration.seconds`. - `event.idm.read_only_udm.principal.group.group_display_name`: Newly mapped `client_as_name` raw log field to `event.idm.read_only_udm.principal.group.group_display_name`. - `event.idm.read_only_udm.network.asn`: Newly mapped `client_as_number` raw log field to `event.idm.read_only_udm.network.asn`. - `event.idm.read_only_udm.network.http.method`: Newly mapped `request` raw log field to `event.idm.read_only_udm.network.http.method`. - `event.idm.read_only_udm.network.application_protocol`: Newly mapped `protocol` raw log field to `event.idm.read_only_udm.network.application_protocol`. - `event.idm.read_only_udm.target.hostname`: Newly mapped `origin_host` raw log field to `event.idm.read_only_udm.target.hostname`. - `event.idm.read_only_udm.target.asset.hostname`: Newly mapped `origin_host` raw log field to `event.idm.read_only_udm.target.asset.hostname`. - `event.idm.read_only_udm.network.tls.version_protocol`: Newly mapped `tls_client_protocol` raw log field to `event.idm.read_only_udm.network.tls.version_protocol`. - `event.idm.read_only_udm.network.tls.client.server_name`: Newly mapped `tls_client_servername` raw log field to `event.idm.read_only_udm.network.tls.client.server_name`. - `event.idm.read_only_udm.network.tls.cipher`: Newly mapped `tls_client_cipher` raw log field to `event.idm.read_only_udm.network.tls.cipher`. - `event.idm.read_only_udm.network.tls.established`: Newly mapped `is_tls` raw log field to `event.idm.read_only_udm.network.tls.established`. - `event.idm.read_only_udm.network.received_bytes`: Newly mapped `req_body_size` raw log field to `event.idm.read_only_udm.network.received_bytes`. - `event.idm.read_only_udm.network.sent_bytes`: Newly mapped `resp_body_size` raw log field to `event.idm.read_only_udm.network.sent_bytes`. - `event.idm.read_only_udm.network.http.response_code`: Newly mapped `status` raw log field to `event.idm.read_only_udm.network.http.response_code`. - `event.idm.read_only_udm.intermediary.hostname`: Newly mapped `server` raw log field to `event.idm.read_only_udm.intermediary.hostname`. - `event.idm.read_only_udm.intermediary.asset.hostname`: Newly mapped `server` raw log field to `event.idm.read_only_udm.intermediary.asset.hostname`. - `event.idm.read_only_udm.intermediary.ip`: Newly mapped `server_ip` raw log field to `event.idm.read_only_udm.intermediary.ip`. - `event.idm.read_only_udm.intermediary.asset.ip`: Newly mapped `server_ip` raw log field to `event.idm.read_only_udm.intermediary.asset.ip`. - `event.idm.read_only_udm.intermediary.location.name`: Newly mapped `server_datacenter` raw log field to `event.idm.read_only_udm.intermediary.location.name`. - `event.idm.read_only_udm.principal.location.country_or_region`: Newly mapped `geo_country_code` raw log field to `event.idm.read_only_udm.principal.location.country_or_region`. - `event.idm.read_only_udm.principal.location.state`: Newly mapped `geo_region` raw log field to `event.idm.read_only_udm.principal.location.state`. - `event.idm.read_only_udm.principal.resource.attribute.labels`: Newly mapped `client_connection_speed` raw log field to `event.idm.read_only_udm.principal.resource.attribute.labels`. - `event.idm.read_only_udm.security_result.detection_fields`: Newly mapped `cache_status` raw log field to `event.idm.read_only_udm.security_result.detection_fields`. - `event.idm.read_only_udm.additional.fields`: Newly mapped `request_accept_content`, `request_accept_language`, `request_accept_encoding`, `content_type`, `response_cache_control`, `response_expires`, `response_last_modified`, `geo_continent_code`, `req_header_size`, `resp_header_size`, `time_start`, `time_end`, `socket_cwnd`, `socket_tcpi_rtt`, `is_ipv6`, `platform_cluster`, `platform_router` raw log fields to `event.idm.read_only_udm.additional.fields`. |
| 2025-01-10 | Newly created parser.
|