What Changed

Version 3.1.0 adds a new CCF push-based connector for MuleSoft CloudHub that receives application logs directly via Log4j HTTP appender. This provides customers with two deployment options: the existing Azure Function connector (API-based) and the new CCF Push connector for Log4j HTTP appender streaming.

Data Collection Method

The new connector creates a custom table MuleSoftCloudhubLogs_CL and uses CCF push ingestion via Data Collection Rule (DCR). Stream name Custom-MuleSoftCloudhubLogs_CL receives structured Log4j data including standard fields (Level, Logger, Message, Thread, Exception) plus MuleSoft-specific context (ApplicationDomainName, WorkerId, Environment, Region, InstanceId) and flexible ApplicationData for custom properties.

Security Impact (Visibility & Fidelity)

MuleSoft recommends this Log4j HTTP appender approach over API polling to avoid rate limiting and duplicate data issues. The real-time streaming provides immediate visibility into application errors, exceptions, and operational events without the delays and gaps inherent in API-based collection. Deployments using the existing Function App connector may experience data loss during API throttling periods — this connector eliminates that blind spot.

MITRE Coverage

Application logging visibility supports detection of:

  • T1071.001 (Web Protocols) — suspicious HTTP activity in application logs
  • T1078 (Valid Accounts) — authentication events in MuleSoft applications
  • T1190 (Exploit Public-Facing Application) — application errors indicating exploitation attempts

Affected Files

Solutions/Mulesoft/Data Connectors/MulesoftLogs_CCF/MulesoftLogs_ConnectorDefinition.json
Solutions/Mulesoft/Data Connectors/MulesoftLogs_CCF/MulesoftLogs_DCR.json
Solutions/Mulesoft/Data Connectors/MulesoftLogs_CCF/MulesoftLogs_PollerConfig.json
Solutions/Mulesoft/Data Connectors/MulesoftLogs_CCF/table_MuleSoftCloudhubLogs.json
Solutions/Mulesoft/Package/testParameters.json
Solutions/Mulesoft/Parsers/parser_MuleSoftCloudhubLogsAliasFunction.json
(packaging artefacts: 3.1.0.zip, ReleaseNotes.md, Solution_Mulesoft.json, createUiDefinition.json, mainTemplate.json)