MonkeyKa

Timestamps processing for CDL sources over HTTPS is not correct

7

## Describe the bug All CDL sources map to an expected sourcetype of pan:firewall_cloud. This means that Splunk uses a consistent set of rules for all log events sent. Either...

Broken mapping of transport Field to Network Traffic datamodel protocol

1

commit 437cf940510a4ffd5165414902e28e560ff6f456 on 9/11/2017 removed the Field Alias from transport to protocol. As a result the Network Traffic datamodel protocol field is not usable for pan:traffic. Workaround is easy enough...

## Describe the bug Have noticed that for pan:traffic, uses the value in dvc_name for dvc while pan:threat, pan:config, and pan:system use the host field this creates an inconsistent summary...