Graylog2 / Graylog2/graylog-plugin-integrations

Update Palo Alto Input

Open
#452 9 comments 0 reactions 0 assignees View on GitHub
feature triaged
Dominant language
Java
Stars
17
Forks
14
PR merge metrics
No merged PRs in 30d

Description

# Description
The current Palo Alto Plugin is good for PAN OS version 8.1, and previous. In the current version (9.1 currently) additional fields were added around SDWAN, and additional changes to logging have been made.

## What
We need to update the PAN Input for the new meta data fields in the THREAT,TRAFFIC, SYSTEM fields like updated [HERE](https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/monitoring/use-syslog-for-monitoring/syslog-field-descriptions/traffic-log-fields.html) but would be good to think about including Authentication and User-ID Log types, as they have valuable information as well.

Also, need to map to current Graylog Schema

## Why

Keep updated on current technologies, and keep the built in inputs mapped to the Graylog Schema

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.