Added fallback to userIdentity.userName for user.name field

Updated ECS version to 8.17.0

Added support for Role type in user identity mapping

Added fallback to additionalEventData.UserName for user.name field

Added ECS field mapping for TLS fields

Expands support for more eventNames (adding category and type)

Utilizes array:append() function for array declarations.

Improves the field extraction and performance.

Fixes misspelling of event.ype to event.type.

Bumps ecs.version to 8.16.0.

Improves the field extraction and performance.

Bumps the minimum LogScale version to 1.142 to support assertions in yaml files.

Parses a timestamp based on the digestStartTime in case there is no eventTime field.

Adds new fields: event.dataset, event.reason, file.name, user.roles, source.ip, host.name and more.

Changes a user.name field values to lowercase.

Sets event.dataset and observer.type based on the event action.

Stops using the csv file to set the event categorization fields.

Renames the parser to aws-cloudtrail

Improves the field extraction and performance.

Bumps parser version to 1.0.1

This version of the package supersedes both the amazon/cloudtrail package as well as previous version of this package.