[INTPLAT-158] [SIEMINT-88] DDS: Palo alto cortex xdr assets v1.0.1: F…

…ix for malicious URLs (#18567) * Processing malicious URL to defang URL * updated dabhshboard images --------- Co-authored-by: Savan Dalasaniya <savan.dalasaniya@CDSYS.LOCAL>
DataDog · Sep 25, 2024 · 4cbecda · 4cbecda
1 parent 2a83f38
commit 4cbecda
Show file tree

Hide file tree

Showing 4 changed files with 3 additions and 3 deletions.
diff --git a/palo_alto_cortex_xdr/assets/dashboards/palo_alto_cortex_xdr_alerts.json b/palo_alto_cortex_xdr/assets/dashboards/palo_alto_cortex_xdr_alerts.json
@@ -1967,7 +1967,7 @@
                                             "width": "auto"
                                         },
                                         {
-                                            "field": "http.url",
+                                            "field": "http.defanged.url",
                                             "width": "auto"
                                         },
                                         {

diff --git a/palo_alto_cortex_xdr/assets/logs/palo-alto-cortex-xdr.yaml b/palo_alto_cortex_xdr/assets/logs/palo-alto-cortex-xdr.yaml
@@ -174,12 +174,12 @@ pipeline:
           preserveSource: false
           overrideOnConflict: false
         - type: attribute-remapper
-          name: Map `malicious_urls` to `http.url`
+          name: Map `malicious_urls` to `http.defanged.url`
           enabled: true
           sources:
             - malicious_urls
           sourceType: attribute
-          target: http.url
+          target: http.defanged.url
           targetType: attribute
           preserveSource: false
           overrideOnConflict: false

diff --git a/palo_alto_cortex_xdr/images/palo_alto_cortex_xdr_alerts.png b/palo_alto_cortex_xdr/images/palo_alto_cortex_xdr_alerts.png
diff --git a/palo_alto_cortex_xdr/images/palo_alto_cortex_xdr_incidents.png b/palo_alto_cortex_xdr/images/palo_alto_cortex_xdr_incidents.png