Change log for GMV_CHECKER

Date Changes
2025-11-07 Enhancement:
- event.idm.read_only_udm.principal.ip, event.idm.read_only_udm.principal.asset.ip: Newly mapped description raw log field(s) with event.idm.read_only_udm.principal.ip, event.idm.read_only_udm.principal.asset.ip UDM field.
- event.idm.read_only_udm.metadata.product_event_type: Changed mapping for event.idm.read_only_udm.metadata.product_event_type from event_code to product_event_type when the product_event_type raw field is available.
- The date parsing logic for the ts raw log field was refactored to handle multiple date formats with improved error handling and failover.
- Added Grok patterns to parse new patterns of logs.
2024-08-27 Enhancement:
- When both agent_hostname and atm_hostname are not null, then mapped atm_hostname to intermediary.hostname.
- Added support for KV format logs.
2024-03-13 Enhancement:
- Added a Grok pattern to parse unparsed logs.
- Mapped user_disp_name to principal.user.user_display_name.
- Mapped user_role to principal.user.user_role.
- If field2 is present, then mapped field2 to principal.user.attribute.permission.description.
- If value of the field field2 is R, then set principal.user.attribute.permission.type to DATA_READ.
- If value of the field field2 is W, then set principal.user.attribute.permission.type to DATA_WRITE.
- If field3 is present, then mapped field3 to principal.user.attribute.permission.description.
- If value of the field field3 is R, then set principal.user.attribute.permission.type to DATA_READ.
- If value of the field field3 is W, then set principal.user.attribute.permission.type to DATA_WRITE.
2022-04-20 Bug - Removed host-specific condition.
2022-03-28 Enhancement-Mapped the following fields:
collected_timestamp, event_timestamp, host, type, Event type, ip, user, description.
2022-03-23 Feature Request-Mapped agent_hostname to principal.hostname.
Added mapping for a new unique log.