Change log for STEALTHBITS_DEFEND

Date Changes

2022-11-17 Enhancement:
- Added a new Grok pattern for newly supported CEF logs.
- Mapped the following fields:
- suser mapped to principal.user.userid.
- duser mapped to target.user.userid.
- shost mapped to principal.hostname.
- sntdom mapped to principal.domain.name.
- Attribute_Name mapped to security_result.summary.
- Operation mapped to security_result.description.
- Policy_Name mapped to security_result.rule_name.
- Attribute_Name mapped to security_result.summary.
- success mapped to security_result_action.

Date	Changes
2022-11-17	Enhancement: - Added a new Grok pattern for newly supported CEF logs. - Mapped the following fields: - `suser` mapped to `principal.user.userid`. - `duser` mapped to `target.user.userid`. - `shost` mapped to `principal.hostname`. - `sntdom` mapped to `principal.domain.name`. - `Attribute_Name` mapped to `security_result.summary`. - `Operation` mapped to `security_result.description`. - `Policy_Name` mapped to `security_result.rule_name`. - `Attribute_Name` mapped to `security_result.summary`. - `success` mapped to `security_result_action`.

Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2026-09-15 UTC.