We've reorganized our documentation navigation structure to align directly with your operational workflows. See the release notes and the walkthrough video for more information.

Change log for UNIFI_AP

Date	Changes
2025-11-24	Enhancement: - Added new Grok pattern to parse new format logs. - event.idm.read_only_udm.principal.mac: Newly mapped `principal_mac` raw log field with `event.idm.read_only_udm.principal.mac` UDM field. - event.idm.read_only_udm.additional.fields: Newly mapped `details`, `event_id` raw log fields with `event.idm.read_only_udm.additional.fields` UDM field. - event.idm.read_only_udm.security_result.detection_fields: Newly mapped `assoc_status`, `dns_resp_seen`, `avg_rssi` raw log fields with `event.idm.read_only_udm.security_result.detection_fields` UDM field. - event.idm.read_only_udm.principal.process.pid: Newly mapped `pid` raw log field with `event.idm.read_only_udm.principal.process.pid` UDM field.
2024-03-22	Enhancement: - Added new Grok pattern to parse new format logs.
2022-05-24	Enhancement - Mapped `event_type` to security_result.action_details
2022-04-13	Bug fix-Added null check for PROTO field prior to mapping it to ip_protocol. Increased parsing percentage by making all the unparsed logs get parsed.