We've reorganized our documentation navigation structure to align directly with your operational workflows. See the release notes and the walkthrough video for more information.

Change log for NEXUS_SONATYPE

Date Changes

2025-11-18 - event.idm.read_only_udm.principal.hostname: Removed resource_name of raw_field from event.idm.read_only_udm.principal.hostname UDM field in order to introduce a more accurate mapping for the raw log field.
- event.idm.read_only_udm.principal.asset.hostname: Removed resource_name of raw_field from event.idm.read_only_udm.principal.asset.hostname UDM field in order to introduce a more accurate mapping for the raw log field.
- event.idm.read_only_udm.target.hostname: Mapped resource_name of raw_field with event.idm.read_only_udm.target.hostname UDM field.
- event.idm.read_only_udm.target.asset.hostname: Mapped resource_name of raw_field with event.idm.read_only_udm.target.asset.hostname UDM field.
- Added a conditional check before mapping event_type with NETWORK_HTTP.

2025-10-17 - Newly created parser.
- Set event.idm.read_only_udm.metadata.vendor_name to NEXUS_SONATYPE and event.idm.read_only_udm.metadata.product_name to NEXUS.
- Modified grok patterns to parse the jsonPayload.message field.
- Implemented conditional logic to set event.idm.read_only_udm.metadata.event_type based on the presence of principal, target, and principal user information.
- event.idm.read_only_udm.metadata.product_log_id: Newly mapped insertId raw log field to event.idm.read_only_udm.metadata.product_log_id UDM field.
- event.idm.read_only_udm.principal.hostname: Newly mapped labels.compute.googleapis.com/resource_name raw log field to event.idm.read_only_udm.principal.hostname UDM field.
- event.idm.read_only_udm.principal.asset.hostname: Newly mapped labels.compute.googleapis.com/resource_name raw log field to event.idm.read_only_udm.principal.asset.hostname UDM field.
- event.idm.read_only_udm.metadata.log_type: Newly mapped logName raw log field to event.idm.read_only_udm.metadata.log_type UDM field.
- event.idm.read_only_udm.metadata.collected_timestamp: Newly mapped receiveTimestamp raw log field to event.idm.read_only_udm.metadata.collected_timestamp UDM field.
- event.idm.read_only_udm.metadata.event_timestamp: Newly mapped timestamp raw log field to event.idm.read_only_udm.metadata.event_timestamp UDM field.
- event.idm.read_only_udm.principal.asset.product_object_id: Newly mapped resource.labels.instance_id raw log field to event.idm.read_only_udm.principal.asset.product_object_id UDM field.
- event.idm.read_only_udm.target.cloud.project.name: Newly mapped resource.labels.project_id raw log field to event.idm.read_only_udm.target.cloud.project.name UDM field.
- event.idm.read_only_udm.target.location.name: Newly mapped resource.labels.zone raw log field to event.idm.read_only_udm.target.location.name UDM field.
- event.idm.read_only_udm.principal.resource.type: Newly mapped resource.type raw log field to event.idm.read_only_udm.principal.resource.type UDM field.
- event.idm.read_only_udm.principal.ip: Newly mapped src_ip raw log field to event.idm.read_only_udm.principal.ip UDM field.
- event.idm.read_only_udm.principal.asset.ip: Newly mapped src_ip raw log field to event.idm.read_only_udm.principal.asset.ip UDM field.
- event.idm.read_only_udm.metadata.ingested_timestamp: Newly mapped date raw log field to event.idm.read_only_udm.metadata.ingested_timestamp UDM field.
- event.idm.read_only_udm.network.http.method: Newly mapped http_method raw log field to event.idm.read_only_udm.network.http.method UDM field.
- event.idm.read_only_udm.target.url: Newly mapped http_url raw log field to event.idm.read_only_udm.target.url UDM field.
- event.idm.read_only_udm.network.application_protocol_version: Newly mapped http_protocol raw log field to event.idm.read_only_udm.network.application_protocol_version UDM field.
- event.idm.read_only_udm.network.http.response_code: Newly mapped response_code raw log field to event.idm.read_only_udm.network.http.response_code UDM field.
- event.idm.read_only_udm.network.sent_bytes: Newly mapped response_bytes raw log field to event.idm.read_only_udm.network.sent_bytes UDM field.
- event.idm.read_only_udm.network.http.user_agent: Newly mapped user_agent raw log field to event.idm.read_only_udm.network.http.user_agent UDM field.
- event.idm.read_only_udm.additional.fields: Newly mapped labels.agent.googleapis.com/log_file_path, ident, nexus_field_1, and request_duration_ms raw log fields to event.idm.read_only_udm.additional.fields UDM field.
- event.idm.read_only_udm.principal.user.userid: Newly mapped auth raw log field to event.idm.read_only_udm.principal.user.userid UDM field.
- event.idm.read_only_udm.target.resource.attribute.labels: Newly mapped thread_id raw log field to event.idm.read_only_udm.target.resource.attribute.labels UDM field.

Date	Changes
2025-11-18	- event.idm.read_only_udm.principal.hostname: Removed `resource_name` of `raw_field` from `event.idm.read_only_udm.principal.hostname` UDM field in order to introduce a more accurate mapping for the raw log field. - event.idm.read_only_udm.principal.asset.hostname: Removed `resource_name` of `raw_field` from `event.idm.read_only_udm.principal.asset.hostname` UDM field in order to introduce a more accurate mapping for the raw log field. - event.idm.read_only_udm.target.hostname: Mapped `resource_name` of `raw_field` with `event.idm.read_only_udm.target.hostname` UDM field. - event.idm.read_only_udm.target.asset.hostname: Mapped `resource_name` of `raw_field` with `event.idm.read_only_udm.target.asset.hostname` UDM field. - Added a conditional check before mapping event_type with `NETWORK_HTTP`.
2025-10-17	- Newly created parser. - Set event.idm.read_only_udm.metadata.vendor_name to `NEXUS_SONATYPE` and event.idm.read_only_udm.metadata.product_name to `NEXUS`. - Modified grok patterns to parse the jsonPayload.message field. - Implemented conditional logic to set event.idm.read_only_udm.metadata.event_type based on the presence of principal, target, and principal user information. - event.idm.read_only_udm.metadata.product_log_id: Newly mapped `insertId` raw log field to `event.idm.read_only_udm.metadata.product_log_id` UDM field. - event.idm.read_only_udm.principal.hostname: Newly mapped `labels.compute.googleapis.com/resource_name` raw log field to `event.idm.read_only_udm.principal.hostname` UDM field. - event.idm.read_only_udm.principal.asset.hostname: Newly mapped `labels.compute.googleapis.com/resource_name` raw log field to `event.idm.read_only_udm.principal.asset.hostname` UDM field. - event.idm.read_only_udm.metadata.log_type: Newly mapped `logName` raw log field to `event.idm.read_only_udm.metadata.log_type` UDM field. - event.idm.read_only_udm.metadata.collected_timestamp: Newly mapped `receiveTimestamp` raw log field to `event.idm.read_only_udm.metadata.collected_timestamp` UDM field. - event.idm.read_only_udm.metadata.event_timestamp: Newly mapped `timestamp` raw log field to `event.idm.read_only_udm.metadata.event_timestamp` UDM field. - event.idm.read_only_udm.principal.asset.product_object_id: Newly mapped `resource.labels.instance_id` raw log field to `event.idm.read_only_udm.principal.asset.product_object_id` UDM field. - event.idm.read_only_udm.target.cloud.project.name: Newly mapped `resource.labels.project_id` raw log field to `event.idm.read_only_udm.target.cloud.project.name` UDM field. - event.idm.read_only_udm.target.location.name: Newly mapped `resource.labels.zone` raw log field to `event.idm.read_only_udm.target.location.name` UDM field. - event.idm.read_only_udm.principal.resource.type: Newly mapped `resource.type` raw log field to `event.idm.read_only_udm.principal.resource.type` UDM field. - event.idm.read_only_udm.principal.ip: Newly mapped `src_ip` raw log field to `event.idm.read_only_udm.principal.ip` UDM field. - event.idm.read_only_udm.principal.asset.ip: Newly mapped `src_ip` raw log field to `event.idm.read_only_udm.principal.asset.ip` UDM field. - event.idm.read_only_udm.metadata.ingested_timestamp: Newly mapped `date` raw log field to `event.idm.read_only_udm.metadata.ingested_timestamp` UDM field. - event.idm.read_only_udm.network.http.method: Newly mapped `http_method` raw log field to `event.idm.read_only_udm.network.http.method` UDM field. - event.idm.read_only_udm.target.url: Newly mapped `http_url` raw log field to `event.idm.read_only_udm.target.url` UDM field. - event.idm.read_only_udm.network.application_protocol_version: Newly mapped `http_protocol` raw log field to `event.idm.read_only_udm.network.application_protocol_version` UDM field. - event.idm.read_only_udm.network.http.response_code: Newly mapped `response_code` raw log field to `event.idm.read_only_udm.network.http.response_code` UDM field. - event.idm.read_only_udm.network.sent_bytes: Newly mapped `response_bytes` raw log field to `event.idm.read_only_udm.network.sent_bytes` UDM field. - event.idm.read_only_udm.network.http.user_agent: Newly mapped `user_agent` raw log field to `event.idm.read_only_udm.network.http.user_agent` UDM field. - event.idm.read_only_udm.additional.fields: Newly mapped `labels.agent.googleapis.com/log_file_path`, `ident`, `nexus_field_1`, and `request_duration_ms` raw log fields to `event.idm.read_only_udm.additional.fields` UDM field. - event.idm.read_only_udm.principal.user.userid: Newly mapped `auth` raw log field to `event.idm.read_only_udm.principal.user.userid` UDM field. - event.idm.read_only_udm.target.resource.attribute.labels: Newly mapped `thread_id` raw log field to `event.idm.read_only_udm.target.resource.attribute.labels` UDM field.