Google SecOps UDM fields indicate data enrichment status
Google SecOps now visually indicates whether UDM fields are enriched with additional context. This new enrichment feature helps users understand the source and added value of data within their security operations platform. All users managing security data in Google SecOps are affected.
Features (1) ›
- Google SecOps UDM fields now show whether data is enriched or not
UDM fields now show whether data is enriched or not The new Enrichment feature introduces improvements for managing and understanding your data. Each UDM field is now labeled with an icon to indicate its data source: U for unenriched fields and E for enriched fields. Enriched fields contain values that Google SecOps generates to provide additional context about artifacts in your environment. For more information, see: Viewing events .
https://docs.cloud.google.com/release-notes#June_09_2026