Change log for ZOOM_OPERATION_LOGS
| Date | Changes |
|---|---|
| 2025-11-06 | Enhancement:
- `event.idm.read_only_udm.target.user.attribute.labels`: Removed mapping of `payload_object_status_id`,`payload_object_status_name` from `event.idm.read_only_udm.target.user.attribute.labels` as this is mapped to `event.idm.read_only_udm.additional.fields`. - `event.idm.read_only_udm.additional.fields`: Mapped `payload_object_status_id`, `payload_object_status_name`,`account_id` raw log fields to `event.idm.read_only_udm.additional.fields`. - Conditional value mapping added for `payload_object_login_type`: The raw value "101" is now mapped to the string "Native Login (Non-SSO)" within `event.idm.read_only_udm.additional.fields`. |
| 2025-10-10 | Enhancement:
- `event.idm.read_only_udm.target.resource.attribute.labels`: Newly mapped `payload.object.settings.chat.allow_users_to_chat_with_others.enable`, `payload.old_object.settings.chat.allow_users_to_chat_with_others.enable` raw log field to `event.idm.read_only_udm.target.resource.attribute.labels`. - `event.idm.read_only_udm.principal.group.product_object_id`: Newly mapped `payload.account_id` raw log field to `event.idm.read_only_udm.principal.group.product_object_id`. - `event.idm.read_only_udm.target.resource.product_object_id`: Newly mapped `payload.account_id` raw log field to `event.idm.read_only_udm.target.resource.product_object_id`. - `event.idm.read_only_udm.principal.user.email_addresses`: Newly mapped `payload.operator`, `payload.object.email` raw log field to `event.idm.read_only_udm.principal.user.email_addresses`. - `event.idm.read_only_udm.principal.user.product_object_id`: Newly mapped `payload.operator_id`, `payload.object.id` raw log field to `event.idm.read_only_udm.principal.user.product_object_id`. - `event.idm.read_only_udm.additional.fields`: Newly mapped `payload.creation_type`, `payload.object.login_type`, `payload.object.date_time`, `payload.object.date_time_ms`, `payload.object.user_access`, `payload.object.channel_settings.concurrent_message_capacity`, `payload.object.channel_settings.multi_channel_engagements.enable`, `payload.object.channel_settings.multi_channel_engagements.max_agent_load` and `payload.time_stamp` raw log field to `event.idm.read_only_udm.additional.fields`. - `event.idm.read_only_udm.target.user.product_object_id`: Newly mapped `payload.object.id` raw log field to `event.idm.read_only_udm.target.user.product_object_id`. - `event.idm.read_only_udm.target.user.first_name`: Newly mapped `payload.object.first_name` raw log field to `event.idm.read_only_udm.target.user.first_name`. - `event.idm.read_only_udm.target.user.last_name`: Newly mapped `payload.object.last_name` raw log field to `event.idm.read_only_udm.target.user.last_name`. - `event.idm.read_only_udm.principal.application`: Newly mapped `payload.object.client_type` raw log field to `event.idm.read_only_udm.principal.application`. - `event.idm.read_only_udm.target.user.email_addresses`: Newly mapped `payload.object.email`, `payload.object.user_email` raw log field to `event.idm.read_only_udm.target.user.email_addresses`. - `event.idm.read_only_udm.target.user.attribute.labels`: Newly mapped `payload.object.role_id`, `payload.object.status_id`, `payload.object.status_name`, `payload.object.type` raw log field to `event.idm.read_only_udm.target.user.attribute.labels`. - `event.idm.read_only_udm.target.user.role_name`: Newly mapped `payload.object.role_name` raw log field to `event.idm.read_only_udm.target.user.role_name`. - `event.idm.read_only_udm.target.location.country_or_region`: Newly mapped `payload.object.country_iso_code` raw log field to `event.idm.read_only_udm.target.location.country_or_region`. - `event.idm.read_only_udm.target.application`: Newly mapped `Zoom` raw log field to `event.idm.read_only_udm.target.application`. - `event.idm.read_only_udm.extensions.auth.type`: Mapped to `SSO` if 'payload.object.login_type' is "100" during login, otherwise mapped to `AUTHTYPE_UNSPECIFIED`. - `event.idm.read_only_udm.target.user.userid`: Newly mapped `payload.object.user_id` raw log field to `event.idm.read_only_udm.target.user.userid`. - event.idm.read_only_udm.metadata.event_type: Mapped to USER_CREATION (for "user.created"), USER_DELETION (for "user.deleted"), USER_LOGIN (for "user.signed_in") and USER_UNCATEGORIZED (for other user-related events). |
| 2025-01-20 | Enhancement:
- Mapped "ip_address" to "principal.ip" and "principal.asset.ip". - Mapped "client_type" to "additional.fields". - Mapped "type" to "additional.fields". - Mapped "version" to "metadata.product_version". |
| 2024-11-21 | Enhancement:
- Added support for the array format of the logs. |
| 2022-11-04 | Newly created parser.
|