Change log for ONEPASSWORD_AUDIT_EVENTS

Date	Changes
2026-05-11	Enhancement: - Added support for JSON format logs. - `event.idm.read_only_udm.metadata.product_log_id`: Newly mapped `uuid` raw log field with `event.idm.read_only_udm.metadata.product_log_id` UDM field. - `event.idm.read_only_udm.metadata.event_timestamp`: Newly mapped `timestamp` raw log field with `event.idm.read_only_udm.metadata.event_timestamp` UDM field. - `event.idm.read_only_udm.principal.user.userid`: Newly mapped `actor_details.uuid` raw log field with `event.idm.read_only_udm.principal.user.userid` UDM field. - `event.idm.read_only_udm.principal.user.user_display_name`: Newly mapped `actor_details.name` raw log field with `event.idm.read_only_udm.principal.user.user_display_name` UDM field. - `event.idm.read_only_udm.principal.user.email_addresses`: Newly mapped `actor_details.email` raw log field with `event.idm.read_only_udm.principal.user.email_addresses` UDM field. - `event.idm.read_only_udm.principal.ip`: Newly mapped `session.ip` raw log field with `event.idm.read_only_udm.principal.ip` and `event.idm.read_only_udm.principal.asset.ip` UDM fields. - `event.idm.read_only_udm.principal.asset.product_object_id`: Newly mapped `session.device_uuid` raw log field with `event.idm.read_only_udm.principal.asset.product_object_id` UDM field. - `event.idm.read_only_udm.principal.location.city`: Newly mapped `location.city` raw log field with `event.idm.read_only_udm.principal.location.city` UDM field. - `event.idm.read_only_udm.principal.location.state`: Newly mapped `location.region` raw log field with `event.idm.read_only_udm.principal.location.state` UDM field. - `event.idm.read_only_udm.principal.location.country_or_region`: Newly mapped `location.country` raw log field with `event.idm.read_only_udm.principal.location.country_or_region` UDM field. - `event.idm.read_only_udm.principal.location.region_coordinates.latitude`: Newly mapped `location.latitude` raw log field with `event.idm.read_only_udm.principal.location.region_coordinates.latitude` UDM field. - `event.idm.read_only_udm.principal.location.region_coordinates.longitude`: Newly mapped `location.longitude` raw log field with `event.idm.read_only_udm.principal.location.region_coordinates.longitude` UDM field. - `event.idm.read_only_udm.target.resource.product_object_id`: Newly mapped `object_uuid` raw log field with `event.idm.read_only_udm.target.resource.product_object_id` UDM field. - `event.idm.read_only_udm.network.session_id`: Newly mapped `session.uuid` raw log field with `event.idm.read_only_udm.network.session_id` UDM field. - `event.idm.read_only_udm.metadata.event_type`: Updated the event type to `USER_UNCATEGORIZED`, `STATUS_UPDATE`, `GENERIC_EVENT` based on the required data. - Added on_error condition to drop non-JSON format logs with tag "TAG_MALFORMED_MESSAGE". - `event.idm.read_only_udm.additional.fields`: Newly mapped `aux_uuid` and `object_type` raw log field with `event.idm.read_only_udm.additional.fields` UDM field. - `event.idm.read_only_udm.principal.user.attribute.labels`: Newly mapped `account_uuid` raw log field with `event.idm.read_only_udm.principal.user.attribute.labels` UDM field. - `event.idm.read_only_udm.principal.user.attribute.roles`: Newly mapped `actor_type` raw log field with `event.idm.read_only_udm.principal.user.attribute.roles` UDM field. - `event.idm.read_only_udm.metadata.product_event_type`: Newly mapped `action` raw log field with `event.idm.read_only_udm.metadata.product_event_type` UDM field. - `event.idm.read_only_udm.principal.user.last_login_time`: Newly mapped `session.login_time` raw log field with `event.idm.read_only_udm.principal.user.last_login_time` UDM field. - `event.idm.read_only_udm.principal.user.attribute.labels`: Newly mapped `actor_uuid` raw log field with `event.idm.read_only_udm.principal.user.attribute.labels` UDM field.
2025-02-17	- Fixed issue for parsing "aux_info". - Mapped "item.timestamp" to "metadata.event_timestamp".
2024-11-06	- Newly created parser