<html lang="en">
<body>
  
    <p>
    <b>[OOTB] KSMG 2.1+ syslog CEF. Version 3</b><br>
	Change log:<br>
		<ul>
			<li>Main normalizer was changed. Event enrichments was removed from the KUMA fields: DeviceCustomString1 (replace with regexp function, lower function), SourceUserName (replace with regexp function), DestinationUserName (replace with regexp function). Conversion was removed from the event field "app". Event enrichment was added to the KUMA field DeviceProcessName (lower function). Event enrichment was removed from the KUMA field Message. Mapping of event field "msg" was removed from the main normalizer. Event enrichment with trim function was removed from the KUMA field DeviceCustomString1. New event enrichment with lower function was added to the KUMA fields SourceHostName, DeviceHostName, DestinationHostName.</li>
			<li>Extra normalizer "CEF" was changed. All event conversions were removed from the msg field. New event enrichment with replace function was added to the KUMA field DeviceCustomString5Label.  Event conversion with replace function was removed from the KUMA field DeviceCustomString1Label. New event enrichment with replace function was added to the KUMA field DeviceCustomString1Label. Event field "cs1" was mapped to the KUMA field DeviceCustomString1. Event enrichment with trim function (for symbols "<", ">") was added to the KUMA field DeviceCustomString1. Event field "msg" was mapped to the KUMA field Message.</li>
		</ul>
  </p>
  
    <p>
    <b>[OOTB] KSMG 2.1+ syslog CEF. Version 2</b><br>
	Change log:<br>
	New event mapping was addded in the extra normalizer "CEF". Event field «KSMGSdaVerdict» was mapped to the KUMA extended event schema field «S.KSMGSdaVerdict», event field «KSMGMessageUUID» was mapped to the KUMA extended event schema field «S.KSMGMessageUUID», event field «KSMGDkimSignatureStatus» was mapped to the KUMA extended event schema field «SA.KSMGDkimSignatureStatus», event field «KSMGDkimSignatureHeaderD» was mapped to the KUMA extended event schema field «SA.KSMGDkimSignatureHeaderD», event field «KSMGDkimSignatureAlignment» was mapped to the KUMA extended event schema field «SA.KSMGDkimSignatureAlignment».
  </p>
  
  <p>
    <b>[OOTB] KSMG 2.1+ syslog CEF. Version 1</b><br>
	This is the first version of the package.<br>
	Change log:
		<ul>
			<li>Support of KSMG 2.1.1 was added.</li>
			<li>New event mapping was addded in the extra normalizer "CEF". Event field «KSMGAvStatus» was mapped to the KUMA extended event schema field «S.AvStatus», event field «KSMGAsStatus» was mapped to the KUMA extended event schema field «S.AsStatus», event field «KSMGApStatus» was mapped to the KUMA extended event schema field «S.ApStatus», event field «KSMGMlfStatus» was mapped to the KUMA extended event schema field «S.MlfStatus», event field «KSMGCfStatus» was mapped to the KUMA extended event schema field «S.CfStatus», event field «KSMGMaStatus» was mapped to the KUMA extended event schema field «S.MaStatus», event field «KSMGKtStatus» was mapped to the KUMA extended event schema field «S.KtStatus», event field «KSMGBackupResult» was mapped to the KUMA extended event schema field «S.BackupResult», event field «KSMGApMethod» was mapped to the KUMA extended event schema field «S.ApMethod», event field «KSMGMlfMethod» was mapped to the KUMA extended event schema field «S.MlfMethod», event field «KSMGRuleNames» was mapped to the KUMA extended event schema field SA.RuleNames», event field «KSMGMessageSubject» was mapped to the KUMA extended event schema field «MessageSubject», event field «KSMGAvDetectionMethods» was mapped to the KUMA extended event schema field «DetectionMethods», event field «KSMGMessageHashType» was mapped to the KUMA extended event schema field «MessageHashType».</li>
		</ul>	
  </p>

</body>
</html>