Change log for VENAFI_ZTPKI

Date	Changes
2025-10-14	Enhancement: - Added a grok pattern to parse new log formats. - event.idm.read_only_udm.metadata.event_timestamp: Newly mapped time_stamp raw log field with event.idm.read_only_udm.metadata.event_timestamp UDM field. - event.idm.read_only_udm.metadata.product_event_type: Newly mapped name raw log field with event.idm.read_only_udm.metadata.product_event_type UDM field. - event.idm.read_only_udm.principal.ip and event.idm.read_only_udm.principal.asset.ip: Newly mapped dvc_ip raw log field with event.idm.read_only_udm.principal.ip and event.idm.read_only_udm.principal.asset.ip UDM field. - event.idm.read_only_udm.target.resource.name: Newly mapped object raw log field with event.idm.read_only_udm.target.resource.name UDM field. - event.idm.read_only_udm.target.resource.attribute.labels: Newly mapped object_subsystem raw log field with event.idm.read_only_udm.target.resource.attribute.labels UDM field. - event.idm.read_only_udm.metadata.product_log_id: Newly mapped event_id raw log field with event.idm.read_only_udm.metadata.product_log_id UDM field. - event.idm.read_only_udm.metadata.description: Newly mapped description raw log field with event.idm.read_only_udm.metadata.description UDM field. - event.idm.read_only_udm.target.resource.product_object_id: Newly mapped object_id raw log field with event.idm.read_only_udm.target.resource.product_object_id UDM field. - event.idm.read_only_udm.target_port: Newly mapped value1.value raw log field with event.idm.read_only_udm.target_port UDM field. - event.idm.read_only_udm.additional.fields: Newly mapped value1.name, text2.value, data.name, data.value, grouping.name, grouping.value, value2.name, value2.value, text1.name, text2.name raw log fields with event.idm.read_only_udm.additional.fields UDM field. - event.idm.read_only_udm.target.ip and event.idm.read_only_udm.target.asset.ip: Newly mapped text1.value raw log field with event.idm.read_only_udm.target.ip and event.idm.read_only_udm.target.asset.ip UDM field. - event.idm.read_only_udm.security_result.severity: Newly mapped severity raw log field with event.idm.read_only_udm.security_result.severity UDM field. - event.idm.read_only_udm.metadata.event_type: If has_principal is true and has_target is true, updated to NETWORK_CONNECTION.
2025-03-03	Enhancement: - Add support for new pattern of csv logs. - Changed mapping for policy_id from security_result.detection_fields to security_result.rule_id. - Changed mapping common_name from principal.resource.attribute.labels to principal.user.user_display_name. - Changed mapping for not_before from security_result.detection_fields to network.tls.client.certificate.not_before. - Changed mapping for not_after from security_result.detection_fields to network.tls.client.certificate.not_after. - Changed mapping for serial from security_result.default_fields to network.tls.client.certificate.serial. - Mapped key_size and key_algorithm to security_result.detection_fields. - Mapped fingerprint_sha256 to network.tls.client.certificate.sha256. - Mapped fringerprint_sha1 to network.tls.client.certificate.sha1. - Mapped policy_name to security_result.rule_name. - Mapped issuer_dn to network.tls.client.certificate.issuer. - Changed mapping for organization_name from principal.resource.attribute.labels to network.organization_name.
2024-12-20	Newly created parser.