pC_panngfwkvnetworktrafficfaildrop.md
December 5, 2023 ยท View on GitHub
Parser Content
{
Name = pan-ngfw-kv-network-traffic-fail-drop
Conditions = ["""TRAFFIC,""", """Panorama,""", """drop,""" ]
ParserVersion = "v1.0.0"
leef-paloalto-vpn-event-1.Fields}[
"""\|devTime=({time}\w{3}\s+\d+ \d\d\d\d \d\d:\d\d:\d\d \w+)\|"""
"""({result}(allow|deny))""",
"""PAN-OS Syslog Integration\|(?:({result}[^\|]+)\|){2}"""
"""cat=({category}[^\s|]+)"""
"""\|msg="*({event_name}[^\|"]+)"""
}