AhnLab XTG

Log Specification v1.1.1 Support

• Supports the XTG log parser specification v1.1.1 format
• Added the User Event (2405) log type and the xtg-user-event log schema
• Added session action, floating IP, source domain, application traffic counter, and proxy session type fields to Traffic Allow (2101) and Traffic Deny (2102)
• Added floating IP fields to Blocklist (2103), Regional Block (2104), IP/MAC Control (2105), and Protocol Anomaly (2106)
• Added the xff_ip field carrying the original client IP from the XFF header to Website Filter (2207)
• Stores the destination domain in both the existing domain field and the standard dst_domain field to maintain backward compatibility

First Release

• Supported parsers and collection models for 37 AhnLab XTG log types
• Added 35 log schemas