CIM field change report

Learn about the CIM field changes between the latest version of the Splunk Add-on for Google Cloud Platform and version 4.0.1.

Summary of changes

• Sourcetypes with changes: 4
• Total deleted fields: 8
• Total modified fields: 5
• Total new fields: 6

Detailed changes

google:gcp:compute:vpc_flows

Field	Deleted	Modified	New	Is CIM
src_vendor_account	❌	❌	✅	❌

google:gcp:pubsub:audit:admin_activity

Field	Deleted	Modified	New	Is CIM
eventtype	❌	✅	❌	✅
tag	❌	❌	✅	✅
tag::eventtype	❌	❌	✅	❌

google:gcp:pubsub:audit:data_access

Field	Deleted	Modified	New	Is CIM
object	❌	✅	❌	✅
object_id	❌	✅	❌	✅
user	❌	✅	❌	✅
user_name	❌	❌	✅	✅

google:gsuite:pubsub:audit:auth

Field	Deleted	Modified	New	Is CIM
action	✅	❌	❌	✅
authentication_method	❌	✅	❌	✅
dusi	✅	❌	❌	❌
is_second_factor	✅	❌	❌	❌
is_suspicious	✅	❌	❌	❌
login_challenge	✅	❌	❌	❌
login_challenge_method	✅	❌	❌	❌
login_challenge_status	✅	❌	❌	❌
login_verification	✅	❌	❌	❌
params	❌	❌	✅	❌
params_list	❌	❌	✅	❌