Change log for OPENPATH
| Date | Changes |
|---|---|
| 2025-06-10 |
- event.idm.read_only_udm.metadata.product_name: Removed mapping of SPYCLOUD from event.idm.read_only_udm.metadata.product_name UDM Field and mapped AVIGILON instead (a incorrect value was mapped so we are replacing it with the correct one).- event.idm.read_only_udm.metadata.vendor_name: Removed mapping of SPYCLOUD from event.idm.read_only_udm.metadata.vendor_name UDM Field and mapped AVIGILON instead (a incorrect value was mapped so we are replacing it with the correct one).
|
| 2025-03-05 |
- Added support to parse the unparsed logs. - Mapped data.userId to principal.user.userid"- Mapped data.acuId to target.resource.id.- Mapped data.acu.name to target.resource.name.- Mapped data.acu.opal, entry.siteId, and entry.zoneId to target.resource.attribute.labels".- Mapped data.connectionType, data.credentialOpal, entry.id, entry.name, and entry.opal to security_result.detection_fields.- Mapped entry.entryStatecode to security_result.category_details.- Mapped entry.statusDetails, entry.entryId, opal, and entryId to security_result.detection_fields.- Mapped data.hardwareDAta.cardNumber, data.hardwareData.cardType, and data.hardware.numBits to additional.fields.- Mapped data.hardwareData.requestId to network.session_id.- Mapped data.httpUserAgent to network.http.user_agent.- Mapped data.userOpal, data.validProximityOtp, and data.validProximityProof to additional.fields.- Mapped data.org.id, data.org.name, and data.org.opal to target.resource.attribute.labels.- Mapped data.readerId, data.requestType, source_type, data.thirdPartyReaderId, and data.thirdPartyWiegandId to additional.fields.- Mapped data.requestId to security_result.detection_fields.- Mapped data.requestStatusDetail to security_result.summary.- Mapped data.requestUri to target.url.- Mapped data.siteIds and data.zondeIds to target.resource.attribute.labels.- Mapped data.status to network.http.response_code.- Mapped event to metadata.product_event.type.- Mapped host to principal.ip and principal.asset.ip.
|
| 2023-11-08 | - Newly created parser. |