We've reorganized our documentation navigation structure to align directly with your operational workflows. See the release notes and the walkthrough video for more information.

Change log for ZSCALER_INTERNET_ACCESS

Date	Changes
2026-01-09	- Updated the field mapping for the Zscaler Internet Access parser. Please refer to the parser documentation page for information regarding the updated UDM mappings - https://docs.cloud.google.com/chronicle/docs/ingestion/default-parsers/zscaler-internet-access#udm_mapping_delta
2025-12-29	- Updated grok pattern for handling different types of json logs.
2025-11-28	- additional.fields[tz]: Newly mapped `tz` raw log field with `additional.fields[tz]` UDM field. - additional.fields[ss]: Newly mapped `ss` raw log field with `additional.fields[ss]` UDM field. - additional.fields[mm]: Newly mapped `mm` raw log field with `additional.fields[mm]` UDM field. - additional.fields[hh]: Newly mapped `hh` raw log field with `additional.fields[hh]` UDM field. - additional.fields[dd]: Newly mapped `dd` raw log field with `additional.fields[dd]` UDM field. - additional.fields[mth]: Newly mapped `mth` raw log field with `additional.fields[mth]` UDM field. - additional.fields[yyyy]: Newly mapped `yyyy` raw log field with `additional.fields[yyyy]` UDM field. - additional.fields[mon]: Newly mapped `mon` raw log field with `additional.fields[mon]` UDM field. - additional.fields[day]: Newly mapped `day` raw log field with `additional.fields[day]` UDM field. - additional.fields[intlogtime]: Newly mapped `intlogtime` raw log field with `additional.fields[intlogtime]` UDM field.
2025-04-30	- Promoted ZSCALER_INTERNET_ACCESS Premium parser to default. You can see full details in the parser configuration page - https://cloud.google.com/chronicle/docs/ingestion/default-parsers/ingest-zscaler-logs