|
| 1 | +--- |
| 2 | +title: February 14th, 2025 - Content Release |
| 3 | +image: https://help.sumologic.com/img/sumo-square.png |
| 4 | +keywords: |
| 5 | + - log mappers |
| 6 | + - parsers |
| 7 | +hide_table_of_contents: true |
| 8 | +--- |
| 9 | + |
| 10 | +import useBaseUrl from '@docusaurus/useBaseUrl'; |
| 11 | + |
| 12 | +<a href="https://help.sumologic.com/release-notes-cse/rss.xml"><img src={useBaseUrl('img/release-notes/rss-orange2.png')} alt="icon" width="50"/></a> |
| 13 | + |
| 14 | +This content release includes: |
| 15 | +- New and updated mappers and parsers for Carbon Black, Cisco ISE, Cisco Umbrella, PAN Firewall CSV and LEEF, and Signal Science (Fastly) WAF. |
| 16 | +- :heart: |
| 17 | + |
| 18 | +Changes are enumerated below. |
| 19 | + |
| 20 | +### Log Mappers |
| 21 | +- [New] Carbon Black Cloud - alert event |
| 22 | +- [Updated] Cisco ISE Radius Diagnostics |
| 23 | + - Supports additional Radius Diagnostic messages. |
| 24 | +- [Updated] Cisco Umbrella DNS Logs |
| 25 | + - Adds `dstDevice_ip`, `normalizedAction`, and `user_email`. |
| 26 | +- [Updated] Cisco Umbrella IP Logs |
| 27 | + - Adds alternate value for `dstDevice_ip` and adds `user_email`. |
| 28 | +- [Updated] Cisco Umbrella Proxy Logs |
| 29 | + - Adds `user_email`. |
| 30 | + |
| 31 | +### Parsers |
| 32 | +- [Updated] /Parsers/System/VMware/Carbon Black Cloud |
| 33 | + - Adds support for alert event event ID. |
| 34 | +- [Updated] /Parsers/System/Cisco/Cisco ISE |
| 35 | + - Adds key value parsing for descriptions. |
| 36 | +- [Updated] /Parsers/System/Cisco/Cisco Umbrella CSV |
| 37 | + - Adds a transform for capturing email addresses. |
| 38 | +- [Updated] /Parsers/System/Palo Alto/PAN Firewall CSV |
| 39 | + - Modifies `parse_system_format_1` regular expression to support additional events. |
| 40 | +- [Updated] /Parsers/System/Palo Alto/PAN Firewall LEEF |
| 41 | + - Normalizes parsing of subtype to have consistent case. |
| 42 | +- [Updated] /Parsers/System/Signal Science/Signal Science WAF |
| 43 | + - Adds additional timestamp handling. |
0 commit comments