Skip to content
This repository has been archived by the owner on Dec 14, 2024. It is now read-only.

Logs have only sourcetype of pan:log #323

Open
bsanjeeva22 opened this issue Feb 9, 2024 · 1 comment
Open

Logs have only sourcetype of pan:log #323

bsanjeeva22 opened this issue Feb 9, 2024 · 1 comment
Assignees
@paulmnguyen
Labels
bug

Comments

@bsanjeeva22
Copy link

We have integrated Pan sources with Splunk via syslog-ng. Until 01/11/24 the sourcetypes the parsing into sourcetypes pan:traffic, pan:threat, pan:system, pan:config was working fine. But, later all logs are found under pan_log.

  • Version of add-on on Indexer used: 7.0.4
@bsanjeeva22 bsanjeeva22 added the bug label Feb 9, 2024
@paulmnguyen
Copy link
Contributor

Was anything changed on the syslog-ng side? Could you please provide a sample of the logs before and after. Please don't include any sensitive data.

@paulmnguyen paulmnguyen self-assigned this Feb 28, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees

@paulmnguyen paulmnguyen

Labels
bug
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@paulmnguyen @bsanjeeva22