Skip to content
This repository has been archived by the owner on Dec 14, 2024. It is now read-only.

Commit

Permalink
fix(addon): Fix src_user field contained destination user
Browse files Browse the repository at this point in the history 
PR #186
  • Loading branch information
@paulmnguyen @btorresgil
paulmnguyen authored and btorresgil committed May 26, 2021
1 parent f61a60c commit ff09245
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion Splunk_TA_paloalto/default/props.conf
View file
Original file line number Diff line number Diff line change
Expand Up @@ -97,7 +97,7 @@ FIELDALIAS-fwcloud_src_interface = InboundInterface as src_interface
EVAL-src_ip = coalesce(SourceAddress, PublicIPv4)
FIELDALIAS-fwcloud_src_location = SourceLocation as src_location
FIELDALIAS-fwcloud_src_port = SourcePort as src_port
FIELDALIAS-fwcloud_src_user = DestinationUser as src_user
FIELDALIAS-fwcloud_src_user = SourceUser as src_user
FIELDALIAS-fwcloud_src_zone = FromZone as src_zone
FIELDALIAS-fwcloud_start_time = SessionStartTime as start_time
FIELDALIAS-fwcloud_threat_category = ThreatCategory as threat_category
Expand Down

0 comments on commit ff09245

Please sign in to comment.