Change log for SENDMAIL

Date	Changes
2026-06-20	Enhancement: - `SYSLOG`: Added support for SYSLOG format. - Added a Grok pattern to parse the raw log fields. - `event.idm.read_only_udm.principal.hostname`: Newly mapped `hostname` raw log field with `event.idm.read_only_udm.principal.hostname` and `event.idm.read_only_udm.principal.asset.hostname` UDM fields. - `event.idm.read_only_udm.principal.application`: Newly mapped `program` raw log field with `event.idm.read_only_udm.principal.application` UDM field. - `event.idm.read_only_udm.principal.process.pid`: Newly mapped `pid` raw log field with `event.idm.read_only_udm.principal.process.pid` UDM field. - `event.idm.read_only_udm.metadata.product_log_id`: Newly mapped `mail_id` raw log field with `event.idm.read_only_udm.metadata.product_log_id` UDM field. - `event.idm.read_only_udm.network.application_protocol`: Newly mapped `proto` raw log field with `event.idm.read_only_udm.network.application_protocol` UDM field when `proto` value is `ESMTP`. - `event.idm.read_only_udm.additional.fields`: Newly mapped `syslog_prio`, `syslog_pri`, `syslog_version`, `id`, `mail_type`, `mail_info`, `class`, `nrcpts`, `proto`, and `daemon` raw log fields with `event.idm.read_only_udm.additional.fields` UDM field.
2026-06-12	Enhancement: - Added grok pattern to support new format of SYSLOG logs. - `event.idm.read_only_udm.target.email`: Newly mapped `email` raw log field with `event.idm.read_only_udm.target.email UDM field`. - `event.idm.read_only_udm.target.hostname`: Newly mapped `target_hostname` raw log field with `event.idm.read_only_udm.target.hostname UDM field`. - `event.idm.read_only_udm.additional.fields`: Newly mapped `syslog_priority` raw log field with `event.idm.read_only_udm.additional.fields UDM field`. - `event.idm.read_only_udm.additional.fields`: Newly mapped `pri` raw log field with `event.idm.read_only_udm.additional.fields` UDM field. - `event.idm.read_only_udm.principal.process.pid`: Newly mapped `process_id` raw log field with `event.idm.read_only_udm.principal.process.pid` UDM field. - `event.idm.read_only_udm.metadata.product_log_id`: Newly mapped `product_log_id` raw log field with `event.idm.read_only_udm.metadata.product_log_id` UDM field. - `event.idm.read_only_udm.principal.application`: Newly mapped `application` raw log field with `event.idm.read_only_udm.principal.application` UDM field. - `event.idm.read_only_udm.security_result.detection_fields`: Newly mapped `dsn` raw log field with `event.idm.read_only_udm.security_result.detection_fields` UDM field. - `event.idm.read_only_udm.security_result.detection_fields`: Newly mapped `mailer` raw log field with `event.idm.read_only_udm.security_result.detection_fields` UDM field. - `event.idm.read_only_udm.additional.fields`: Newly mapped `delay`, `STARTTLS`, `bits` and `xdelay` raw log field with `event.idm.read_only_udm.additional.fields` UDM field. - `event.idm.read_only_udm.security_result.action_details`: Newly mapped `action_details` raw log field with `event.idm.read_only_udm.security_result.action_details` UDM field. - `event.idm.read_only_udm.metadata.event_type`: Newly set `event.idm.read_only_udm.metadata.event_type` to `STATUS_UPDATE` when principal machine data is present. - `event.idm.read_only_udm.security_result.description`: Newly mapped `verify` raw log field with `event.idm.read_only_udm.security_result.description` UDM field. - `event.idm.read_only_udm.network.tls.version`: Newly mapped `version` raw log field with `event.idm.read_only_udm.network.tls.version` UDM field.
2023-09-20	Enhancement: - Added condition to "from" parameter if the value is not in email format, then append "@local".
2022-05-06	Enhancement-Mapped following fields: tls_verify to security_result.description. tls_version to network.tls.version. cipher to network.tls.cipher. size to network.sent_bytes. eventid to metadata.product_log_id.