As part of our ongoing efforts to improve data consistency and analysis capabilities across our XDR platform, we are implementing an important modification to the HarfangLab EDR
log parsing process.
We are enhancing the way user information is parsed to ensure better standardization across all data sources. This change specifically affects how domain and username information is structured.
user.name
= domain\user
user.domain
= domain
user.name
= user
🗓️ Deployment is scheduled for February 20th, 2025 at 12:00 CET
user.name
fieldContact our Support Team if you have any questions or need assistance preparing for this change.
Best regards,
The Integrations Team