Change log for SAP_WEBDISP

Date	Changes
2026-01-15	Enhancement: - Added support for JSON format. - Mapping the whole raw log into `metadata.description` field to parse the generic event logs. - `event.idm.read_only_udm.additional.fields`: Newly mapped `clz_dir`, `clz_subdir`, `clzfilename` and `sap_code` raw log fields with `event.idm.read_only_udm.additional.fields` UDM field. - `event.idm.read_only_udm.metadata.event_timestamp`: Newly mapped `_time` raw log field with `event.idm.read_only_udm.metadata.event_timestamp` UDM field. - `event.idm.read_only_udm.metadata.collected_timestamp`: Newly mapped `log_timestamp` raw log field with `event.idm.read_only_udm.metadata.collected_timestamp` UDM field. - `event.idm.read_only_udm.network.http.response_code`: Newly mapped `response_code` raw log field with `event.idm.read_only_udm.network.http.response_code` UDM field. - `event.idm.read_only_udm.principal.asset.hostname`: Newly mapped `host` raw log field with `event.idm.read_only_udm.principal.asset.hostname` UDM field. - `event.idm.read_only_udm.principal.hostname`: Newly mapped `host` raw log field with `event.idm.read_only_udm.principal.hostname` UDM field. - `event.idm.read_only_udm.principal.process.pid`: Newly mapped `thread_id` raw log field with `event.idm.read_only_udm.principal.process.pid` UDM field. - `event.idm.read_only_udm.security_result.detection_fields`: Newly mapped `transaction_id`, `file`, `line`, `msg_start` and `msg_end` raw log fields with `event.idm.read_only_udm.security_result.detection_fields` UDM field. - `event.idm.read_only_udm.security_result.severity`: Newly mapped `severity` raw log field with `event.idm.read_only_udm.security_result.severity` UDM field. - `event.idm.read_only_udm.target.file.full_path`: Newly mapped `source` raw log field with `event.idm.read_only_udm.target.file.full_path` UDM field. - `event.idm.read_only_udm.target.url`: Newly mapped `target_url` raw log field with `event.idm.read_only_udm.target.url` UDM field. - `event.idm.read_only_udm.target.resource.attribute.labels`: Newly mapped `sap_component` and `system_id` raw log fields with `event.idm.read_only_udm.target.resource.attribute.labels` UDM field.
2024-03-15	- Newly created parser.

Date

Changes

2026-01-15

Enhancement:
- Added support for JSON format.
- Mapping the whole raw log into `metadata.description` field to parse the generic event logs.
- `event.idm.read_only_udm.additional.fields`: Newly mapped `clz_dir`, `clz_subdir`, `clzfilename` and `sap_code` raw log fields with `event.idm.read_only_udm.additional.fields` UDM field.
- `event.idm.read_only_udm.metadata.event_timestamp`: Newly mapped `_time` raw log field with `event.idm.read_only_udm.metadata.event_timestamp` UDM field.
- `event.idm.read_only_udm.metadata.collected_timestamp`: Newly mapped `log_timestamp` raw log field with `event.idm.read_only_udm.metadata.collected_timestamp` UDM field.
- `event.idm.read_only_udm.network.http.response_code`: Newly mapped `response_code` raw log field with `event.idm.read_only_udm.network.http.response_code` UDM field.
- `event.idm.read_only_udm.principal.asset.hostname`: Newly mapped `host` raw log field with `event.idm.read_only_udm.principal.asset.hostname` UDM field.
- `event.idm.read_only_udm.principal.hostname`: Newly mapped `host` raw log field with `event.idm.read_only_udm.principal.hostname` UDM field.
- `event.idm.read_only_udm.principal.process.pid`: Newly mapped `thread_id` raw log field with `event.idm.read_only_udm.principal.process.pid` UDM field.
- `event.idm.read_only_udm.security_result.detection_fields`: Newly mapped `transaction_id`, `file`, `line`, `msg_start` and `msg_end` raw log fields with `event.idm.read_only_udm.security_result.detection_fields` UDM field.
- `event.idm.read_only_udm.security_result.severity`: Newly mapped `severity` raw log field with `event.idm.read_only_udm.security_result.severity` UDM field.
- `event.idm.read_only_udm.target.file.full_path`: Newly mapped `source` raw log field with `event.idm.read_only_udm.target.file.full_path` UDM field.
- `event.idm.read_only_udm.target.url`: Newly mapped `target_url` raw log field with `event.idm.read_only_udm.target.url` UDM field.
- `event.idm.read_only_udm.target.resource.attribute.labels`: Newly mapped `sap_component` and `system_id` raw log fields with `event.idm.read_only_udm.target.resource.attribute.labels` UDM field.

2024-03-15

- Newly created parser.