<html lang="en">
<body>

<p>
   <b>[OOTB] Ideco UTM syslog. Version 5</b><br>
    Change list:
     <ul>
		<li>New event enrichment was added in the main normalizer (DestinationHostName field to lower case).</li>
		<li>New regular expression was added in the extra normalizer "extraNormalizer squid".</li>
		<li>New event field mapping was added in the extra normalizer "extraNormalizer squid". Event field "con_numb" was mapped to the KUMA field "DeviceCustomNumber1". Event field "srcPort" was mapped to the KUMA field "SourcePort". Event field "file_descr" was mapped to the KUMA field "FileID". Event field "flag" was mapped to the KUMA field "DeviceCustomNumber3". Event field "err_numb" was mapped to the KUMA field "DeviceCustomNumber2". Event field "master_trans" was mapped to the KUMA field "DeviceCustomString4".</li>
		<li>New extra normalizers were added: "extraNormalizer ideco-etcd-permanent-defrag", "extraNormalizer ideco-ad-backend", "extraNormalizer ideco-web-backend", "extraNormalizer kv part", "extraNormalizer suricata", "extraNormalizer web-proxy".</li>
	 </ul>
  </p>

<p>
   <b>[OOTB] Ideco UTM syslog. Version 4</b><br>
    Change list:
     <ul>
		<li>Additional event type support was added. Regular expression for parsing SQUID events was edited in the main normalizer. New regular expression was added to the extra normalizer "extraNormalizer squid".</li>
		<li>New extra normalizer "squid KV part" was added.</li>
	 </ul>
  </p>

<p>
   <b>[OOTB] Ideco UTM syslog. Version 3</b><br>
  
   Change list:
     <ul>
	 <li>Additional event type support has been added. New regular expressions have been added to main normalizer and extra normalizer "extraNormalizer squid".</li>
	 <li>Event enrichment with dictionary "[OOTB] Syslog Priority To Facility and Severity" has been added to the main normalizer.</li>
	 </ul>
  </p>

  <p>
   <b>[OOTB] Ideco UTM syslog. Version 2</b><br>
  
   Change list:
     <ul>
	 <li>Support of events from Ideco UTM 14.10 was added.</li>
	 <li>Other minor improvements.</li>
	 </ul>
  </p>
  
  <p>
   <b>[OOTB] Ideco UTM syslog. Version 1</b><br>
	This is the first version of the package.
  </p>

</body>
</html>
