We've reorganized our documentation navigation structure to align directly with your operational workflows. See the release notes and the walkthrough video for more information.

Change log for SHIBBOLETH_IDP

Date	Changes
2024-11-14	Enhancement: - Changed the Grok pattern field name from `USERNAME` to `DATA` to map `userid` to `principal.user.userid`.
2024-08-05	Enhancement: - Added Grok patterns to parse a new format of logs.
2024-03-11	Enhancement: - Added support for JSON format logs. - Added a Grok pattern to parse `dns` type logs. - Mapped `createdDateTime` to `metadata.event_timestamp`. - Mapped `id` to `metadata.product_log_id`. - Mapped `ipAddress` and `ip` to `principal.ip`. - Mapped `location.city` to `principal.location.city` - Mapped `location.state` to `principal.location.state`. - Mapped `location.country` to `principal.location.country`. - Mapped `location.geoCoordinates.latitude` to `principal.location.region_latitude`. - Mapped `location.geoCoordinates.longitude` to `principal.location.region_longitude`. - Mapped `userDisplayName` to `principal.user.user_display_name`. - Mapped `resourceDisplayName` to `target.resource.name`. - Mapped `resourceId` to `target.resource.product_object_id`. - Mapped `deviceDetail.displayName` to `principal.asset.hardware`. - Mapped `deviceDetail.browser` to `network.http.user_agent`. - Mapped `deviceDetail.operatingSystem` to `principal.platform_version`. - Mapped `deviceDetail.operatingSystem` to `principal.platform`. - Mapped `record_name` to `dns.question.name`. - Mapped `record_type` to `dns.question.class`.