Change log for GCP_SECURITYCENTER_TOXIC_COMBINATION
| Date | Changes |
|---|---|
| 2025-09-30 | - target.file.full_path: Newly mapped `finding.file.path` raw log field with `target.file.full_path` UDM field for the first file object entry.
- about.file.full_path: Newly mapped `finding.file.path` raw log field with `about.file.full_path` UDM field for all file entries except the first one. - target.file.size: Newly mapped `finding.file.size` raw log field with `target.file.size` UDM field for file for the first file object entry. - about.file.size: Newly mapped `finding.file.size` raw log field with `about.file.size` UDM field for all file entries except the first one. - target.file.sha256: Newly mapped `finding.file.sha256` raw log field with `target.file.sha256` UDM field for the first file object entry. - about.file.sha256: Newly mapped `finding.file.sha256` raw log field with `about.file.sha256` UDM field for all file entries except the first one. - additional.fields : Newly mapped `finding.file.hashedSize` raw log field with `additional.fields` UDM field. - additional.fields : Newly mapped `finding.file.partiallyHashed` raw log field with `additional.fields` UDM field. - additional.fields : Newly mapped `finding.file.contents` raw log field with `additional.fields` UDM field. - additional.fields : Newly mapped `finding.file.diskPath.partitionUuid` raw log field with `additional.fields` UDM field. - additional.fields : Newly mapped `finding.file.diskPath.relativePath` raw log field with `additional.fields` UDM field. - additional.fields : Newly mapped `finding.file.operations.type` raw log field with `additional.fields` UDM field. |
| 2025-06-23 | - Updated the security_result.url_back_to_product UDM field base URL value from https://console.cloud.google.com/ to https://console.us.cloud.google.com for location 'us'.
- Updated the security_result.url_back_to_product UDM field base URL value from https://console.cloud.google.com/ to https://console.eu.cloud.google.com for location 'eu'. |
| 2025-04-09 | - Updated the security_result.url_back_to_product UDM field base URL value from https://console.cloud.google.com/ to https://console.sa.cloud.google.com for location 'sa'.
|
| 2025-02-07 | - Updated the mapping for "security_result.url_back_to_product" UDM field. Added the project ID value from the raw log field value "resource.projectDisplayName" to end of the URL mapped to "security_result.url_back_to_product" UDM field with the prefix ";?project=".
|
| 2024-11-21 | - Added support for the v2 version of the SCC API, and the following fields are included as part of the update:
- resource.gcpMetadata.project - resource.gcpMetadata.projectDisplayName - resource.gcpMetadata.parent - resource.gcpMetadata.parentDisplayName - resource.gcpMetadata.folders.resourceFolder - resource.gcpMetadata.folders.resourceFolderDisplayName - resource.gcpMetadata.organization |
| 2024-03-20 | - Newly created parser.
|