Parse Palo Alto Traffic Syslog
Parsing of all Palo Alto Traffic Syslog types with removal of null values and options for filtering out of info level, internal, allowed and specific DNS logs while also removing the start of messages.
Included Processors
1
Processing Selection
Set the fields to true for processors to filter/reduce.
2
Parse with Regex - TCP
Removes syslog header for later CSV parsing.
3
Parse with Regex - SYSLOG
No description available
4
Parse TRAFFIC
No description available
5
Filter - DNS
No description available
6
Filter - Allowed Messages
No description available
7
Filter - Internal to Internal
No description available
8
Filter - Traffic Start
No description available
9
Copy Original to body
No description available