Change log for HP_PROCURVE
| Date | Changes |
|---|---|
| 2025-11-12 |
Enhancement: - Added a Grok pattern to parse unparsed logs. - event.idm.read_only_udm.metadata.event_timestamp: Newly mapped ts raw log field with event.idm.read_only_udm.metadata.event_timestamp UDM field.- event.idm.read_only_udm.additional.fields: Newly mapped timezone, vendor_id raw log field to event.idm.read_only_udm.additional.fields UDM field with key timezone.- event.idm.read_only_udm.principal.application: Newly mapped prin_app raw log field with event.idm.read_only_udm.principal.application UDM field.
|
| 2024-03-04 |
Enhancement: - Added a Grok pattern to parse unparsing logs. - If severity is equal to DHCP, then mapped DHCP to network.application_protocol.- Mapped severity to security_result.severity_details.- Mapped prin_port to principal.port.- Mapped pid to principal.process.pid.- Mapped descript to metadata.description.- Mapped inter_ip to intermediary.ip.- Mapped remote_ip_address to principal.ip.- Mapped username to principal.user.userid.- Mapped status, config_method, event_id, and notice_type to additional.fields.
|
| 2023-09-24 |
Enhancement: - Added a Grok pattern to parse unparsed logs. - Mapped target_mac to target.mac.- Mapped msg to metadata.description.- Mapped src_mac to principal.mac.- Mapped severity to security_result.severity.
|
| 2023-07-24 |
Enhancement - - Added Grok pattern to parse and map unparsed logs. |