We've reorganized our documentation navigation structure to align directly with your operational workflows. See the release notes and the walkthrough video for more information.
Stay organized with collections
Save and categorize content based on your preferences.
Change log for MICROSOFT_CASB
Date
Changes
2025-03-26
Enhancement: - Modified and added Grok pattern to parse different time formats. - Added a conditional check when mapping suser to principal.user.userid. - Mapped uniqueServiceAppIds to target.resource.id. - Added a conditional check before setting metadata.event_type to USER_LOGIN and renaming event.idm.read_only_udm.principal.user to event.idm.read_only_udm.target.user. - Added a conditional check before setting metadata.event_type to USER_RESOURCE_CREATION , USER_RESOURCE_UPDATE_CONTENT and RESOURCE_READ. - Added a user_display_name null check before mapping user_display_name to principal.user.userid. - Added on error when mapping suser to principal.user.userid and principal.user.user_display_name.
2023-11-27
Enhancement: - Handled unparsed JSON logs.
2023-06-28
Enhancement: - Enhanced parser to set the metadata.event_type to a more specific value and reduce the number of logs with GENERIC_EVENT for metadata.event_type.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2026-08-11 UTC."],[],[]]