Graylog2 / Graylog2/graylog-plugin-integrations

Palo Alto Networks Firewall TCP (PAN-OS v9+) input parse error

Open
#956 1 comment 0 reactions 0 assignees View on GitHub
bug triaged
Dominant language
Java
Stars
17
Forks
14
PR merge metrics
No merged PRs in 30d

Description

## Expected Behavior

field **pan_source_user** contains date **2021-12-29 08:06:50.775 +00:00**

## Current Behavior

field **pan_source_user** should contain **username**

## Possible Solution

Take a look to https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/monitoring/use-syslog-for-monitoring/syslog-field-descriptions/user-id-log-fields.html#id23f3cbfb-946f-423f-bc48-50fdc2b68238

## Steps to Reproduce (for bugs)

1. Use Graylog 4.2.4+b643d2b on f687edde0f02 (Oracle Corporation 1.8.0_312 on Linux 5.4.0-53-generic)
2. and Palo Alto Firewall 10.0.8
3. create Palo Alto Networks Firewall TCP (PAN-OS v9+) input

## Context

## Your Environment

* Graylog Version: 4.2.4+b643d2b
* Java Version: f687edde0f02 (Oracle Corporation 1.8.0_312 on Linux 5.4.0-53-generic)
* Elasticsearch Version: 7.10.2
* MongoDB Version: 4.2
* Operating System: Ubuntu 20.04
* Browser version: FF 95

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.