Change log for TELEPORT_ACCESS_PLANE
| Date | Changes |
|---|---|
| 2026-02-12 |
Enhancement: - event.idm.read_only_udm.additional.fields: Newly mapped code, ei, orig_log_filename raw log field with event.idm.read_only_udm.additional.fields UDM field.- event.idm.read_only_udm.target.application: Newly mapped app_name raw log field with event.idm.read_only_udm.target.application UDM field.- event.idm.read_only_udm.target.hostname, event.idm.read_only_udm.target.asset.hostname: Newly mapped app_public_addr raw log field with event.idm.read_only_udm.target.hostname and event.idm.read_only_udm.target.asset.hostname UDM field.- event.idm.read_only_udm.target.url: Newly mapped app_uri raw log field with event.idm.read_only_udm.target.url UDM field.- event.idm.read_only_udm.network.http.method: Newly mapped method raw log field with event.idm.read_only_udm.network.http.method UDM field.- event.idm.read_only_udm.network.http.response_code: Newly mapped status_code raw log field with event.idm.read_only_udm.network.http.response_code UDM field.- event.idm.read_only_udm.target.file.full_path: Newly mapped path raw log field with event.idm.read_only_udm.target.file.full_path UDM field.- event.idm.read_only_udm.metadata.event_timestamp: Newly mapped timestamp raw log field with event.idm.read_only_udm.metadata.event_timestamp UDM field.- Added a grok pattern for new log format. |
| 2025-09-04 |
Enhancement: - event.idm.read_only_udm.principal.asset.product_object_id : Newly mapped bot_instance_id raw log field with `event.idm.read_only_udm.principal.asset.product_object_id UDM field.- event.idm.read_only_udm.principal.application : Newly mapped bot_name raw log field with event.idm.read_only_udm.principal.application UDM field.- event.idm.read_only_udm.target.resource.name : Newly mapped cluster_name raw log field with event.idm.read_only_udm.target.resource.name UDM field.- event.idm.read_only_udm.principal.hostname : Newly mapped server_hostname raw log field with event.idm.read_only_udm.principal.hostname UDM field.- event.idm.read_only_udm.principal.asset.hostname : Newly mapped server_hostname raw log field with event.idm.read_only_udm.principal.asset.hostname UDM field.- event.idm.read_only_udm.target.resource.product_object_id : Newly mapped server_id raw log field with event.idm.read_only_udm.target.resource.product_object_id UDM field.- event.idm.read_only_udm.metadata.product_event_type : Newly mapped event raw log field with event.idm.read_only_udm.metadata.product_event_type UDM field.- event.idm.read_only_udm.principal.user.user_display_name: Newly mapped login raw log field with event.idm.read_only_udm.principal.user.user_display_name UDM field.- event.idm.read_only_udm.principal.namespace : Newly mapped namespace raw log field with event.idm.read_only_udm.principal.namespace UDM field.- event.idm.read_only_udm.network.session_id : Newly mapped sid raw log field with event.idm.read_only_udm.network.session_id UDM field.- event.idm.read_only_udm.target.user.attribute.roles : Newly mapped server_labels.Role raw log field with event.idm.read_only_udm.target.user.attribute.roles UDM field.- event.idm.read_only_udm.target.application : Newly mapped server_labels.aws_application raw log field with event.idm.read_only_udm.target.application UDM field.- event.idm.read_only_udm.principal.user.attribute.labels : Newly mapped user raw log field with event.idm.read_only_udm.principal.user.attribute.labels UDM field.- event.idm.read_only_udm.principal.resource.attribute.labels : Newly mapped impersonator raw log field with event.idm.read_only_udm.principal.resource.attribute.labels UDM field.- event.idm.read_only_udm.metadata.ingestion_labels : Newly mapped server_id raw log field with event.idm.read_only_udm.metadata.ingestion_labels UDM field.- event.idm.read_only_udm.target.asset.attribute.labels : Newly mapped server_labels.Environment, server_labels.OS, server_labels.Version, server_labels.aws_backup, server_labels.aws_cost_center, server_labels.aws_environment, server_labels.aws_role, server_labels.aws_terraform, server_labels.aws_tier, server_labels.aws_zone and server_labels.aws_name raw log field with event.idm.read_only_udm.target.asset.attribute.labels UDM field.- event.idm.read_only_udm.additional.fields : Newly mapped ei, private_key_policy, server_labels.Uptime, user_kind, server_version, and code raw log field with event.idm.read_only_udm.additional.fields UDM field.
|
| 2025-02-19 |
Enhancement: - Added support for JSON logs. |
| 2023-11-17 |
Enhancement: - Mapped remote_addr to target.ip.- Mapped port to target.port.
|
| 2023-05-09 | Newly created parser. |