Change log for ONAPSIS
| Date | Changes |
|---|---|
| 2025-11-25 | Enhancement:
- Added support for a new log format. - event.idm.read_only_udm.additional.fields: Newly mapped `conditions.condition_id`, `conditions.eval_value.success`, `conditions.matched`, `erp_event_source`, `erp_time`, `protocol` raw log fields with `event.idm.read_only_udm.additional.fields` UDM field. - event.idm.read_only_udm.security_result.confidence_details: Newly mapped `confidence` raw log field with `event.idm.read_only_udm.security_result.confidence_details` UDM field. - event.idm.read_only_udm.security_result.severity_details: Newly mapped `severity` raw log field with `event.idm.read_only_udm.security_result.severity_details` UDM field. - event.idm.read_only_udm.security_result.action: Newly mapped `success` raw log field with `event.idm.read_only_udm.security_result.action` UDM field. - event.idm.read_only_udm.intermediary.ip: Newly mapped `inter_ip` raw log field with `event.idm.read_only_udm.intermediary.ip` and `event.idm.read_only_udm.intermediary.asset.ip` UDM fields. - event.idm.read_only_udm.metadata.event_type: If `event_type` is "UserLogin" and `has_target` is "true", updated to `USER_LOGIN`. - The `created_at` field now supports `RFC3339` and `ISO8601` date formats. - The logic for populating `principal.ip`, `principal.asset.ip`, `principal.hostname`, and `principal.asset.hostname` has been updated to check if the source fields (`host`, `src`, `terminal_source`) are valid IP addresses. |
| 2023-12-08 | - Newly created parser.
|