pC_panngfwkvnetworktrafficfaildrop.md

December 5, 2023 ยท View on GitHub

Parser Content

{
Name = pan-ngfw-kv-network-traffic-fail-drop
Conditions = ["""TRAFFIC,""", """Panorama,""", """drop,""" ]
ParserVersion = "v1.0.0"

leef-paloalto-vpn-event-1.Fields}[
  """\|devTime=({time}\w{3}\s+\d+ \d\d\d\d \d\d:\d\d:\d\d \w+)\|"""
  """({result}(allow|deny))""",
  """PAN-OS Syslog Integration\|(?:({result}[^\|]+)\|){2}"""
  """cat=({category}[^\s|]+)"""
  """\|msg="*({event_name}[^\|"]+)"""
 
}