Change log for OPENPATH
| Date | Changes |
|---|---|
| 2025-06-10 | - event.idm.read_only_udm.metadata.product_name: Removed mapping of `SPYCLOUD` from `event.idm.read_only_udm.metadata.product_name` UDM Field and mapped `AVIGILON` instead (a incorrect value was mapped so we are replacing it with the correct one).
- event.idm.read_only_udm.metadata.vendor_name: Removed mapping of `SPYCLOUD` from `event.idm.read_only_udm.metadata.vendor_name` UDM Field and mapped `AVIGILON` instead (a incorrect value was mapped so we are replacing it with the correct one). |
| 2025-03-05 | - Added support to parse the unparsed logs.
- Mapped "data.userId to "principal.user.userid" - Mapped "data.acuId" to "target.resource.id". - Mapped "data.acu.name" to "target.resource.name". - Mapped "data.acu.opal", entry.siteId", and "entry.zoneId" to "target.resource.attribute.labels". - Mapped "data.connectionType", "data.credentialOpal", "entry.id", "entry.name", and "entry.opal" to "security_result.detection_fields". - Mapped "entry.entryStatecode" to "security_result.category_details". - Mapped "entry.statusDetails", "entry.entryId", "opal", and "entryId" to "security_result.detection_fields". - Mapped "data.hardwareDAta.cardNumber", "data.hardwareData.cardType", and "data.hardware.numBits" to "additional.fields". - Mapped "data.hardwareData.requestId" to "network.session_id". - Mapped "data.httpUserAgent" to "network.http.user_agent". - Mapped "data.userOpal", "data.validProximityOtp", and "data.validProximityProof" to "additional.fields". - Mapped "data.org.id", "data.org.name", and "data.org.opal" to "target.resource.attribute.labels". - Mapped "data.readerId", "data.requestType", "source_type", "data.thirdPartyReaderId", and "data.thirdPartyWiegandId" to "additional.fields". - Mapped "data.requestId" to "security_result.detection_fields". - Mapped "data.requestStatusDetail" to "security_result.summary". - Mapped "data.requestUri" to "target.url". - Mapped "data.siteIds" and "data.zondeIds" to "target.resource.attribute.labels". - Mapped "data.status" to "network.http.response_code". - Mapped "event" to "metadata.product_event.type". - Mapped "host" to "principal.ip" and "principal.asset.ip". |
| 2023-11-08 | - Newly created parser.
|