We've reorganized our documentation navigation structure to align directly with your operational workflows. See the release notes and the walkthrough video for more information.

Change log for TRENDMICRO_VISION_ONE_CONTAINER_VULNERABILITIES

Date Changes

2025-04-07 - Newly created parser.
- event.idm.read_only_udm.metadata.event_timestamp: Newly mapped scantime raw log field with event.idm.read_only_udm.metadata.event_timestamp UDM field.
- event.idm.read_only_udm.metadata.product_log_id: Newly mapped scanID raw log field with event.idm.read_only_udm.metadata.product_log_id UDM field.
- event.idm.read_only_udm.principal.asset.vulnerabilities.name: Newly mapped vulnerabilityname raw log field with event.idm.read_only_udm.principal.asset.vulnerabilities.name UDM field.
- event.idm.read_only_udm.principal.asset.vulnerabilities.description: Newly mapped description raw log field with event.idm.read_only_udm.principal.asset.vulnerabilities.description UDM field.
- event.idm.read_only_udm.principal.asset.vulnerabilities.cve_id: Newly mapped cverecord.id raw log field with event.idm.read_only_udm.principal.asset.vulnerabilities.cve_id UDM field.
- event.idm.read_only_udm.additional.fields: Newly mapped clusterID, clusterName, imageID, registry, repository raw log fields with event.idm.read_only_udm.additional.fields UDM field.

Date	Changes
2025-04-07	- Newly created parser. - `event.idm.read_only_udm.metadata.event_timestamp`: Newly mapped `scantime` raw log field with `event.idm.read_only_udm.metadata.event_timestamp` UDM field. - `event.idm.read_only_udm.metadata.product_log_id`: Newly mapped `scanID` raw log field with `event.idm.read_only_udm.metadata.product_log_id` UDM field. - `event.idm.read_only_udm.principal.asset.vulnerabilities.name`: Newly mapped `vulnerabilityname` raw log field with `event.idm.read_only_udm.principal.asset.vulnerabilities.name` UDM field. - `event.idm.read_only_udm.principal.asset.vulnerabilities.description`: Newly mapped `description` raw log field with `event.idm.read_only_udm.principal.asset.vulnerabilities.description` UDM field. - `event.idm.read_only_udm.principal.asset.vulnerabilities.cve_id`: Newly mapped `cverecord.id` raw log field with `event.idm.read_only_udm.principal.asset.vulnerabilities.cve_id` UDM field. - `event.idm.read_only_udm.additional.fields`: Newly mapped `clusterID`, `clusterName`, `imageID`, `registry`, `repository` raw log fields with `event.idm.read_only_udm.additional.fields` UDM field.