Change log for TEAMVIEWER
| Date | Changes |
|---|---|
| 2025-12-01 |
Enhancement: - event.idm.read_only_udm.metadata.product_log_id: Removed mapping of AffectedItem from event.idm.read_only_udm.metadata.product_log_id UDM field in order to introduce a more accurate mapping.- event.idm.read_only_udm.principal.resource.product_object_id: Mapped AffectedItem raw log field to event.idm.read_only_udm.principal.resource.product_object_id UDM field.- Updated on_error for details.PropertyName, details.PropertyCategory, details.NewValue, details.OldValue raw log fields with no_property_name, no_property_category, no_new_value and no_old_value to handle null values.
|
| 2025-11-19 |
Enhancement: - event.idm.read_only_udm.principal.user.userid: Newly mapped Author raw log field with event.idm.read_only_udm.principal.user.userid UDM field.- event.idm.read_only_udm.principal.user.email_addresses: Newly mapped AuthorEmail raw log field with event.idm.read_only_udm.principal.user.email_addresses UDM field.- event.idm.read_only_udm.metadata.product_log_id: Newly mapped AffectedItem raw log field with event.idm.read_only_udm.metadata.product_log_id UDM field.- event.idm.read_only_udm.additional.fields: Newly mapped EventType raw log field with event.idm.read_only_udm.additional.fields UDM field.- event.idm.read_only_udm.security_result.detection_fields: Newly mapped details.PropertyName, details.PropertyCategory, details.NewValue, details.OldValue raw log field(s) with event.idm.read_only_udm.security_result.detection_fields UDM field.- event.idm.read_only_udm.target.group.group_display_name: Newly mapped details.NewValue raw log field with event.idm.read_only_udm.target.group.group_display_name UDM field.- event.idm.read_only_udm.target.group.product_object_id: Newly mapped details.NewValue raw log field with event.idm.read_only_udm.target.group.product_object_id UDM field.- event.idm.read_only_udm.target.asset.product_object_id: Newly mapped details.NewValue raw log field with event.idm.read_only_udm.target.asset.product_object_id UDM field.- event.idm.read_only_udm.target.asset.hostname: Newly mapped details.NewValue raw log field with event.idm.read_only_udm.target.asset.hostname UDM field.- event.idm.read_only_udm.metadata.event_type: If has_target is true or src_user_present is true, updated to USER_UNCATEGORIZED.
|
| 2024-10-30 |
Enhancement: - Added support for the new log format. |
| 2022-08-02 |
Enhancement: - Added grok to avoid mapping of invalid value in target.user.user_display_name- Changed the field metadata.event_type from GENERIC_EVENT to USER_UNCATEGORIZED and USER_RESOURCE_ACCESS
|