diff --git a/blog-cse/2025-02-14-content.md b/blog-cse/2025-02-14-content.md new file mode 100644 index 0000000000..725aa48e65 --- /dev/null +++ b/blog-cse/2025-02-14-content.md @@ -0,0 +1,43 @@ +--- +title: February 14th, 2025 - Content Release +image: https://help.sumologic.com/img/sumo-square.png +keywords: + - log mappers + - parsers +hide_table_of_contents: true +--- + +import useBaseUrl from '@docusaurus/useBaseUrl'; + +icon + +This content release includes: +- New and updated mappers and parsers for Carbon Black, Cisco ISE, Cisco Umbrella, PAN Firewall CSV and LEEF, and Signal Science (Fastly) WAF. +- :heart: + +Changes are enumerated below. + +### Log Mappers +- [New] Carbon Black Cloud - alert event +- [Updated] Cisco ISE Radius Diagnostics + - Supports additional Radius Diagnostic messages. +- [Updated] Cisco Umbrella DNS Logs + - Adds `dstDevice_ip`, `normalizedAction`, and `user_email`. +- [Updated] Cisco Umbrella IP Logs + - Adds alternate value for `dstDevice_ip` and adds `user_email`. +- [Updated] Cisco Umbrella Proxy Logs + - Adds `user_email`. + +### Parsers +- [Updated] /Parsers/System/VMware/Carbon Black Cloud + - Adds support for alert event event ID. +- [Updated] /Parsers/System/Cisco/Cisco ISE + - Adds key value parsing for descriptions. +- [Updated] /Parsers/System/Cisco/Cisco Umbrella CSV + - Adds a transform for capturing email addresses. +- [Updated] /Parsers/System/Palo Alto/PAN Firewall CSV + - Modifies `parse_system_format_1` regular expression to support additional events. +- [Updated] /Parsers/System/Palo Alto/PAN Firewall LEEF + - Normalizes parsing of subtype to have consistent case. +- [Updated] /Parsers/System/Signal Science/Signal Science WAF + - Adds additional timestamp handling.