<html lang="en">
<body>
 
  <p>
     <b>[OOTB] FreeIPA. Version 2</b><br>
	  Change log:
	  <ul>
		<li>Regular expressions were fixed in the extra normalizer «message parser».</li>
		<li>New regular expressions were added to the extra normalizer «message parser».</li>
		<li>Mutation was added to the event field «data» in the extra normalizer «message parser».</li>
		<li>Event enrichment with constant was added to the KUMA field «Name» in the extra normalizer «message parser».</li>
		<li>New extra normalizers were added: «NOT INFO», «INFO», «audit», «title», «certs», «cn», «record», «idnsSOA», «krb», «ost».</li>
		<li>Mapping was changed in the extra normalizer « message parser». Event field "wtime" was mapped from the KUMA field "OldFileName" to the KUMA field "DeviceCustomFloatingPoint1". Event field "optime" was mapped from the KUMA field "OldFilePath" to the KUMA field "DeviceCustomFloatingPoint2". Event field "etime" was mapped from the KUMA field "OldFilePermission" to the KUMA field "DeviceCustomFloatingPoint3".</li>
		<li>Mapping of event field "@version" was removed from the main normalizer.</li>
	  </ul>
 </p>
 
 <p>
     <b>[OOTB] FreeIPA. Version 1</b><br>
	Old normalizer was replaced with new normalizer for FreeIPA (version 4.8) events in json format.   
 </p>

</body>
</html>