Package cloudflare/zerotrust Release Notes

Package cloudflare/zerotrust Release Notes Version 1.2.2
  • Fixed email attachment parsing by properly dropping temporary arrays

  • Updated ECS version to 8.17.0

  • Updated parser version to 2.1.2

Package cloudflare/zerotrust Release Notes Version 1.2.1
  • Fixed email attachment parsing by properly dropping temporary arrays

  • Updated ECS version to 8.17.0

  • Updated parser version to 2.1.1

Package cloudflare/zerotrust Release Notes Version 1.2.0
  • Improved JSON parsing with support for message prefix removal

  • Enhanced event categorization with proper event.category and event.type arrays

  • Added comprehensive email attachment parsing for Area1 security logs

  • Improved HTTP response status code handling for better event outcome determination

  • Added support for bulk log processing with improved detection logic

Package cloudflare/zerotrust Release Notes Version 1.1.1
  • Improves the case statement to only look for fields that are not possibly null

  • Reassigns as.number to client.as.number and interface.id to observer.egress.interface.id to comply with ECS standards

Package cloudflare/zerotrust Release Notes Version 1.1.0
  • Improves the field extraction and performance.

  • Bumps the minimum LogScale version to 1.142 to support parser assertions in yaml files.

  • Adds support of Network Analytics, Magic IDS and Zone-scoped HTTP Requests logs.

  • Adds event.reason, message, interface.name, email.from.address, email.sender.address, email.to.address, file.name, file.size, file.sizefile.size, device.id fields and more.

  • Renames the parser to cloudflare-one.

Package cloudflare/zerotrust Release Notes Version 1.0.0
  • Adds new event.module and Cps.version fields

  • Removes the Product, related.user and related.ip fields

  • Sets following tags: Cps.version, Vendor, ecs.version, event.dataset, event.kind, event.module, event.outcome, observer.type