This repository has been archived by the owner on Dec 14, 2024. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 49
pan:threat_traps : FIELDALIAS-signature ( CIM ) #81
Comments
mattimustang
pushed a commit
to mattimustang/SplunkforPaloAltoNetworks
that referenced
this issue
Nov 29, 2019
beddc80 Fixes PaloAltoNetworks#118 - add `TemplateStack.devices` param dc73c20 adding objects.SecurityProfileGroup 2bba42f Correcting docstring 0df4a2a Fixes unittest and fixes PaloAltoNetworks#115 - adding .move() db54830 Fixes PaloAltoNetworks#116 - Updating ha.HighAvailability for 8.1 62d659e removing default value (causes dynamic section to always be present) 877f933 adding 8.1 dynamic destination NAT stuff 35e195f Merge branch 'release/0.6.3' into develop bcbabfe Bump version to 0.6.3 47557c5 Add tests for recent bug fixes and add pytest cache to gitignore e3eea07 Change test ENV vars to have PD_ prefix a9eeac1 Fix issue with printing objects that have no name 467e7f7 Merge branch 'release/0.6.2' into develop 2632d07 Bump to 0.6.2 and add release note 68ee366 Fix issue in error message check b2da6f4 Add condition on travis deployment to pypi so only one deployment is attempted 1026702 Merge branch 'release/0.6.1' into develop dc302c5 Bump version to 0.6.1 01d803f For objects with id, uid is id 913b1e7 Add graphviz and Jupiter Notebooks support for visualization of pandevice configuration tree f981701 Update travis to deploy to PyPI dd15f5b fixing `firewall.Firewall.create_vsys()` e740429 Merge branch 'release/0.6.0' into develop 30457f8 bumping version to 0.6.0 6be504e Adding unittest for pano > ao; should be shared object 3a95ff3 Fixes PaloAltoNetworks/pan-os-python#96 - Fixes PaloAltoNetworks/pan-os-python#84 - Fixes PaloAltoNetworks/ansible-pan#44 (PaloAltoNetworks#109) 90c1b10 Support timeouts for logins in user-id module 976029d Removing HA device switch on _gather_bulk_info() facc5a3 Merge branch 'release/0.5.3' into develop 3098ca0 bumping version to 0.5.3 26bada2 Adding support for ike and ipsec crypto profiles, ipsec tunnels, and ike gateways; fixing ipv6 enabled xpath for various network objects 2481cf1 Fixing live test - use a netmask for the OspfExportRule ed7329f Merge branch 'release/0.5.2' into develop 2c1acdb Bumping version to 0.5.2 b0f7238 Fixes PaloAltoNetworks/pan-os-python#106 - adds support for DHCP on the mngt interface 779040d Fixes PaloAltoNetworks/pan-os-python#105 - explicitly set _ha_active in refresh_ha_active() 4af2434 Fixes PaloAltoNetworks/pan-os-python#104 - don't invoke active in show_highavailability_state() 308c523 Fixes PaloAltoNetworks/pan-os-python#102 - check for None before trying to iterate ff73f00 Fixes PaloAltoNetworks/pan-os-python#101 - check for None vsys before doing imports 90079a7 Fixes PaloAltoNetworks/pan-os-python#100 - consider subinterface type when generating xpath e17fecf Fixes PaloAltoNetworks/pan-os-python#99 - don't try to import ha or aggregate-group interfaces e3174ae Merge branch 'release/0.5.1' into develop f1f9314 Bumping version to 0.5.1 1bdaf9d Merge branch 'release/0.5.1' into develop 6e70bc2 Bumping version to 0.5.1 5203ea1 Updating the description 2960738 Fixes PaloAltoNetworks/pan-os-python#97 - expand check for panorama in create_from_device b74c7c6 Fixes PaloAltoNetworks/pan-os-python#92 - fixes device.Vsys and reclassify network.VirtualWire as VsysOperations (PaloAltoNetworks#94) 2574c48 Fixes PaloAltoNetworks/pan-os-python#89 - if an importable has no vsys, make the parent the firewall if necessary (PaloAltoNetworks#90) d6b9772 Fixes PaloAltoNetworks/pan-os-python#88 - bulk create/apply should check ALWAYS_IMPORT when considering vsys (PaloAltoNetworks#91) df9997c Fixes PaloAltoNetworks/pan-os-python#93 - root is vsys for security and nat policies (PaloAltoNetworks#95) 33b39ef Merge branch 'release/0.5.0' into develop f331841 tweaking language 7191a24 Version 0.5.0 471082e Fixes PaloAltoNetworks/pan-os-python#72 - rearchitect of bulk operations to be called on object, not parent of object (PaloAltoNetworks#81) abf1511 Fixes PaloAltoNetworks/pan-os-python#71 - add reorganizer and allow subinterfaces to have vsys/fw objects as parents (PaloAltoNetworks#79) c3b6ee6 Fixes PaloAltoNetworks/pan-os-python#69 - fully implements Zone (PaloAltoNetworks#80) a204dfc Fixes PaloAltoNetworks/pan-os-python#68 - fixes equal() to ignore order of members/entries when order is not functionally relevant to comparison (PaloAltoNetworks#78) e90db2e Fixes PaloAltoNetworks/pan-os-python#70 - support limited vsys refresh (PaloAltoNetworks#76) d7d49ea Fix issue where `refreshall()` uses wrong xpath for vsys importable objects 3b9cf0a Change behavior of vsys delete so it is only automatic for interfaces or when vsys is set a650a22 DRY vsys xpath generation and fix issue where wrong vsys is used when calling `create_vsys()` with an override vsys 21c0252 Fixes PaloAltoNetworks/pan-os-python#56 - add live network tests (PaloAltoNetworks#75) eada48b Small correction to vsys import logic. All vsys importable object should get imported, but only interfaces should force an import to vsys1 if no vsys is specified. 94a7585 Simpler xpath algorithm. Default vsys is now None instead of 'vsys1'. Migrated DeviceGroup object to 'VersionedPanObject'. (PaloAltoNetworks#74) 26d941e Add color_code method to translate real colors to color codes ee8e084 Predefined tag object support in the predefined module (PaloAltoNetworks#33) 4b5dc46 Remove obsolete VsysImportMixin class 232addf Merge commit 'd4ede7b2cc6ad75c2ec1c2e13af8e2b4e94fd626' into develop 26b7c7c Merge commit '8cecb84e0bb864ec713527556ca603c40d552e6a' into develop b71b49d Merge commit '41a82877978c8beaac44f0b80e04f1e09626018f' into develop ba1c1b8 Merge commit '4234882ace8bb5d9b5ba8e5b01a29dff6318d6d4' as 'bin/lib/pandevice' git-subtree-dir: bin/lib/pandevice git-subtree-split: beddc80f8b3cc7db03dd375bd9ec8433b9299070
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Hi,
The alias for the sourcetype pan:threat_traps for CIM field "signature" is "module_id " when with others sourceytypes is "threat_name". I think it more accurate to use "threat_name" that "module_id" for this alias, for example, you can a look this information from a real TMS deployment: Event1: module_id = COMPONENT_MEDIA_CTRL and threat_name = Execution From a Restricted Location.
Best regards
The text was updated successfully, but these errors were encountered: