Package aws/cloudtrail Release Notes

Package aws/cloudtrail Release Notes Version 1.1.0

  • Improves the field extraction and performance.

  • Bumps the minimum LogScale version to 1.142 to support assertions in yaml files.

  • Parses a timestamp based on the digestStartTime in case there is no eventTime field.

  • Adds new fields: event.dataset, event.reason, file.name, user.roles, source.ip, host.name and more.

  • Changes a user.name field values to lowercase.

  • Sets event.dataset and observer.type based on the event action.

  • Stops using the csv file to set the event categorization fields.

  • Renames the parser to aws-cloudtrail

Package aws/cloudtrail Release Notes Version 1.0.1

  • Improves the field extraction and performance.

  • Bumps parser version to 1.0.1

Package aws/cloudtrail Release Notes Version 1.0.0

  • This version of the package supersedes both the amazon/cloudtrail package as well as previous version of this package.

    • If you are migrating here from the amazon/cloudtrail package, the following changes apply:

    • If you are upgrading from older version of this package, note that this is update is a large breaking change, where the package now normalizes the logs to a common schema, and also removes the dashboard. If you wish to keep the old parser and dashboard, feel free to keep using the old version of the package.