Graylog2 / Graylog2/graylog-plugin-integrations
Update Palo Alto Input
- Dominant language
- Java
- Stars
- 17
- Forks
- 14
- PR merge metrics
- No merged PRs in 30d
Description
# Description
The current Palo Alto Plugin is good for PAN OS version 8.1, and previous. In the current version (9.1 currently) additional fields were added around SDWAN, and additional changes to logging have been made.
## What
We need to update the PAN Input for the new meta data fields in the THREAT,TRAFFIC, SYSTEM fields like updated [HERE](https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/monitoring/use-syslog-for-monitoring/syslog-field-descriptions/traffic-log-fields.html) but would be good to think about including Authentication and User-ID Log types, as they have valuable information as well.
Also, need to map to current Graylog Schema
## Why
Keep updated on current technologies, and keep the built in inputs mapped to the Graylog Schema
Contributor guide
Assessment
This issue has not been assessed yet.