We've reorganized our documentation navigation structure to align directly with your operational workflows. See the release notes and the walkthrough video for more information.
Stay organized with collections
Save and categorize content based on your preferences.
Change log for ORDR_IOT
Date
Changes
2024-03-05
Enhancement- - Mapped timestamp to metadata.event_timestamp. - Mapped protocol to network.ip_protocol. - Mapped reference to additional.fields.
2022-08-19
Enhancement- - Mapped deviceName to event.idm.read_only_udm.principal.hostname. - Modified grok to handle unparsed logs of type auditTrail. - Reduced Generic percentage by mapping to event.idm.read_only_udm.metadata.event_type to STATUS_UPDATE where applicable.
2022-04-13
Enhancement-Added mappings for new fields: - clientId mapped to event.idm.read_only_udm.principal.mac. - alarmHash mapped to event.idm.read_only_udm.additional.fields. - connectionState mapped to event.idm.read_only_udm.additional.fields. Increased parsing percentage.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2026-08-26 UTC."],[],[]]