Change log for GCP_CLOUD_ASSET_INVENTORY

Date	Changes
2026-05-08	- Newly created parser. - `event.idm.read_only_udm.target.resource.attribute.last_update_time`: Newly mapped `asset.updateTime` raw log field with `event.idm.read_only_udm.target.resource.attribute.last_update_time` UDM field. - `event.idm.read_only_udm.metadata.product_event_type`: Newly mapped `asset.resource.discoveryName` raw log field with `event.idm.read_only_udm.metadata.product_event_type` UDM field. - `event.idm.read_only_udm.metadata.product_version`: Newly mapped `asset.resource.version` raw log field with `event.idm.read_only_udm.metadata.product_version` UDM field. - `event.idm.read_only_udm.principal.ip` and `event.idm.read_only_udm.principal.asset.ip`: Newly mapped `asset.resource.data.connectionEndpoints.ipAddress`, `priorAsset.resource.data.connectionEndpoints.ipAddress` raw log fields with `event.idm.read_only_udm.principal.ip` and `event.idm.read_only_udm.principal.asset.ip` UDM field. - `event.idm.read_only_udm.target.location.country_or_region`: Newly mapped `asset.resource.location` raw log field with `event.idm.read_only_udm.target.location.country_or_region` UDM field. - `event.idm.read_only_udm.target.url`: Newly mapped `asset.resource.data.selfLink` raw log field with `event.idm.read_only_udm.target.url` UDM field. - `event.idm.read_only_udm.target.resource.name`: Newly mapped `asset.name` raw log field with `event.idm.read_only_udm.target.resource.name` UDM field. - `event.idm.read_only_udm.target.resource.product_object_id`: Newly mapped `priorAsset.resource.data.id` raw log field with `event.idm.read_only_udm.target.resource.product_object_id` UDM field. - `event.idm.read_only_udm.target.resource.resource_subtype`: Newly mapped `priorAsset.resource.discoveryName` raw log field with `event.idm.read_only_udm.target.resource.resource_subtype` UDM field. - `event.idm.read_only_udm.additional.fields`: Newly mapped `priorAssetState`, `asset.resource.data.id`, `priorAsset.resource.data.creationTimestamp`, `priorAsset.updateTime`, and `window.startTime` raw log fields with `event.idm.read_only_udm.additional.fields` UDM field. - `event.idm.read_only_udm.target.resource.attribute.labels`: Newly mapped `asset.resource.data.creationTimestamp`, `asset.resource.data.name`, `asset.assetType`, `asset.resource.data.connectionPreference`, `asset.resource.data.fingerprint`, `asset.resource.data.description`, `asset.resource.discoveryDocumentUri`, `asset.resource.data.network`, `asset.resource.parent`, `asset.resource.data.region`, `asset.ancestors`, `asset.resource.data.subnetworks`, `asset.resource.data.connectionEndpoints`, `priorAsset.resource.data.connectionPreference`, `priorAsset.resource.data.description`, `priorAsset.resource.data.fingerprint`, `priorAsset.resource.data.name`, `priorAsset.resource.data.network`, `priorAsset.resource.discoveryDocumentUri`, `priorAsset.resource.data.selfLink`, `priorAsset.resource.version`, `priorAsset.resource.parent`, `priorAsset.name`, `priorAsset.assetType`, `priorAsset.resource.data.region`, `priorAsset.resource.location`, `priorAsset.ancestors`, `priorAsset.resource.data.subnetworks`, and `priorAsset.resource.data.connectionEndpoints` raw log fields with `event.idm.read_only_udm.target.resource.attribute.labels` UDM field. - `event.idm.read_only_udm.target.resource_ancestors.name`: Newly mapped `priorAsset.resource.parent` raw log field with `event.idm.read_only_udm.target.resource_ancestors.name` UDM field. - `event.idm.read_only_udm.metadata.event_type`: Newly set `event.idm.read_only_udm.metadata.event_type` to `STATUS_UPDATE` when principal machine data is present. - `event.idm.read_only_udm.metadata.event_type`: Newly set `event.idm.read_only_udm.metadata.event_type` to `GENERIC_EVENT` when no principal machine data , target machine data and user data are present.

Date

Changes

2026-05-08

- Newly created parser.
- `event.idm.read_only_udm.target.resource.attribute.last_update_time`: Newly mapped `asset.updateTime` raw log field with `event.idm.read_only_udm.target.resource.attribute.last_update_time` UDM field.
- `event.idm.read_only_udm.metadata.product_event_type`: Newly mapped `asset.resource.discoveryName` raw log field with `event.idm.read_only_udm.metadata.product_event_type` UDM field.
- `event.idm.read_only_udm.metadata.product_version`: Newly mapped `asset.resource.version` raw log field with `event.idm.read_only_udm.metadata.product_version` UDM field.
- `event.idm.read_only_udm.principal.ip` and `event.idm.read_only_udm.principal.asset.ip`: Newly mapped `asset.resource.data.connectionEndpoints.ipAddress`, `priorAsset.resource.data.connectionEndpoints.ipAddress` raw log fields with `event.idm.read_only_udm.principal.ip` and `event.idm.read_only_udm.principal.asset.ip` UDM field.
- `event.idm.read_only_udm.target.location.country_or_region`: Newly mapped `asset.resource.location` raw log field with `event.idm.read_only_udm.target.location.country_or_region` UDM field.
- `event.idm.read_only_udm.target.url`: Newly mapped `asset.resource.data.selfLink` raw log field with `event.idm.read_only_udm.target.url` UDM field.
- `event.idm.read_only_udm.target.resource.name`: Newly mapped `asset.name` raw log field with `event.idm.read_only_udm.target.resource.name` UDM field.
- `event.idm.read_only_udm.target.resource.product_object_id`: Newly mapped `priorAsset.resource.data.id` raw log field with `event.idm.read_only_udm.target.resource.product_object_id` UDM field.
- `event.idm.read_only_udm.target.resource.resource_subtype`: Newly mapped `priorAsset.resource.discoveryName` raw log field with `event.idm.read_only_udm.target.resource.resource_subtype` UDM field.
- `event.idm.read_only_udm.additional.fields`: Newly mapped `priorAssetState`, `asset.resource.data.id`, `priorAsset.resource.data.creationTimestamp`, `priorAsset.updateTime`, and `window.startTime` raw log fields with `event.idm.read_only_udm.additional.fields` UDM field.
- `event.idm.read_only_udm.target.resource.attribute.labels`: Newly mapped `asset.resource.data.creationTimestamp`, `asset.resource.data.name`, `asset.assetType`, `asset.resource.data.connectionPreference`, `asset.resource.data.fingerprint`, `asset.resource.data.description`, `asset.resource.discoveryDocumentUri`, `asset.resource.data.network`, `asset.resource.parent`, `asset.resource.data.region`, `asset.ancestors`, `asset.resource.data.subnetworks`, `asset.resource.data.connectionEndpoints`, `priorAsset.resource.data.connectionPreference`, `priorAsset.resource.data.description`, `priorAsset.resource.data.fingerprint`, `priorAsset.resource.data.name`, `priorAsset.resource.data.network`, `priorAsset.resource.discoveryDocumentUri`, `priorAsset.resource.data.selfLink`, `priorAsset.resource.version`, `priorAsset.resource.parent`, `priorAsset.name`, `priorAsset.assetType`, `priorAsset.resource.data.region`, `priorAsset.resource.location`, `priorAsset.ancestors`, `priorAsset.resource.data.subnetworks`, and `priorAsset.resource.data.connectionEndpoints` raw log fields with `event.idm.read_only_udm.target.resource.attribute.labels` UDM field.
- `event.idm.read_only_udm.target.resource_ancestors.name`: Newly mapped `priorAsset.resource.parent` raw log field with `event.idm.read_only_udm.target.resource_ancestors.name` UDM field.
- `event.idm.read_only_udm.metadata.event_type`: Newly set `event.idm.read_only_udm.metadata.event_type` to `STATUS_UPDATE` when principal machine data is present.
- `event.idm.read_only_udm.metadata.event_type`: Newly set `event.idm.read_only_udm.metadata.event_type` to `GENERIC_EVENT` when no principal machine data , target machine data and user data are present.