Christian Tramnitz created METRON-940:
-
Summary: problems with current Palo Alto schema for CEF parser
Key: METRON-940
URL: https://issues.apache.org/jira/browse/METRON-940
Project: Metron
[
https://issues.apache.org/jira/browse/METRON-940?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Christian Tramnitz updated METRON-940:
--
Attachment: pan-os-70-CEF-guide.pdf
pan-os-61-CEF-guide.pdf
> problems w
[
https://issues.apache.org/jira/browse/METRON-940?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Christian Tramnitz updated METRON-940:
--
Description:
The current Palo Alto parser (schema on top of CEF parser) seems to use a
[
https://issues.apache.org/jira/browse/METRON-940?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Christian Tramnitz updated METRON-940:
--
Description:
The current Palo Alto parser (schema on top of CEF parser) seems to use a
Christian Tramnitz created METRON-941:
-
Summary: native PaloAlto parser corrupts message when having a
comma in the payload
Key: METRON-941
URL: https://issues.apache.org/jira/browse/METRON-941
Pr
[
https://issues.apache.org/jira/browse/METRON-941?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16004620#comment-16004620
]
Christian Tramnitz commented on METRON-941:
---
Does anyone have objection against
[
https://issues.apache.org/jira/browse/METRON-941?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16004687#comment-16004687
]
Christian Tramnitz commented on METRON-941:
---
There are some other issues with th
Christian Tramnitz created METRON-962:
-
Summary: fix PaloAltoParserTest
Key: METRON-962
URL: https://issues.apache.org/jira/browse/METRON-962
Project: Metron
Issue Type: Task