Change log for HUAWEI_SWITCH
| Date | Changes |
|---|---|
| 2026-01-22 | Enhancement:
- Modified grok pattern to parse new format of hostname. - `event.idm.read_only_udm.additional.fields`: Newly mapped `alarmID`, `event_identifier` and `clearType` to `event.idm.read_only_udm.additional.fields` UDM field. - `event.idm.read_only_udm.metadata.description`: Newly mapped `temp_description` to `event.idm.read_only_udm.metadata.description` UDM field. - `event.idm.read_only_udm.metadata.product_log_id`: Newly mapped `temp_cid` to `event.idm.read_only_udm.metadata.product_log_id` UDM field. |
| 2026-01-08 | Enhancement:
- Added grok pattern to parse new log format. - `event.idm.read_only_udm.intermediary.hostname`: Newly mapped "hostname" field with event.idm.read_only_udm.intermediary.hostname UDM field. - `event.idm.read_only_udm.additional.fields`: Newly mapped "severity" to "event.idm.read_only_udm.additional.fields" UDM field. - `event.idm.read_only_udm.additional.fields`: Newly mapped "facility" to "event.idm.read_only_udm.additional.fields" UDM field. - `event.idm.read_only_udm.principal.ip` and `event.idm.read_only_udm.principal.asset.ip`: Newly mapped "host" field to "event.idm.read_only_udm.principal.ip" and "event.idm.read_only_udm.principal.asset.ip" UDM field. - `event.idm.read_only_udm.additional.fields`: Newly mapped "facilityName" to "event.idm.read_only_udm.additional.fields" UDM field. - `event.idm.read_only_udm.security_result.severity_details`: Newly mapped "severityName" to "event.idm.read_only_udm.security_result.severity_details" UDM field. - `event.idm.read_only_udm.security_result.severity`: Newly mapped "severityName" to "event.idm.read_only_udm.security_result.severity" when the field value is "warning". - `event.idm.read_only_udm.additional.fields`: Newly mapped "DeviceType" to "event.idm.read_only_udm.additional.fields" UDM field. - `event.idm.read_only_udm.metadata.event_timestamp` : Newly mapped "syslog_timestamp" to "event.idm.read_only_udm.metadata.event_timestamp" UDM field. - `event.idm.read_only_udm.principal.asset.asset_id`: Newly mapped "devid" to "event.idm.read_only_udm.principal.asset.asset_id" UDM field. |
| 2025-01-22 | Newly created parser.
|