Skip to content

Commit e004659

Browse files
rm-socprimerm-socprime
committed
add webserver and slack
1 parent d3dba4e commit e004659

File tree

5 files changed

+66
-0
lines changed

5 files changed

+66
-0
lines changed

‎uncoder-core/app/translator/mappings/platforms/palo_alto_cortex/apache_httpd.yml

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
platform: Palo Alto XSIAM
2+
source: apache_httpd
3+
4+
5+
default_log_source:
6+
dataset: apache_httpd_raw
7+
8+
field_mapping:
9+
c-uri: xdm.network.http.url
10+
c-useragent: xdm.source.user_agent
11+
cs-method: xdm.network.http.method
12+
cs-bytes: xdm.target.sent_bytes
13+
c-uri-query: xdm.network.http.url
14+
cs-referrer: xdm.network.http.referrer
15+
sc-status: xdm.network.http.response_code

‎uncoder-core/app/translator/mappings/platforms/palo_alto_cortex/apache_tomcat.yml

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
platform: Palo Alto XSIAM
2+
source: apache_tomcat
3+
4+
5+
default_log_source:
6+
dataset: apache_tomcat_raw
7+
8+
field_mapping:
9+
c-uri: xdm.network.http.url
10+
c-useragent: User_agent
11+
cs-method: xdm.network.http.method
12+
cs-bytes: xdm.target.sent_bytes
13+
sc-status: xdm.network.http.response_code

‎uncoder-core/app/translator/mappings/platforms/palo_alto_cortex/nginx_nginx.yml

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
platform: Palo Alto XSIAM
2+
source: nginx_nginx
3+
4+
5+
default_log_source:
6+
dataset: nginx_nginx_raw
7+
8+
field_mapping:
9+
c-uri: xdm.network.http.url
10+
c-useragent: User_agent
11+
cs-method: xdm.network.http.method
12+
cs-bytes: xdm.target.sent_bytes
13+
c-uri-query: xdm.network.http.url
14+
cs-referrer: xdm.event.description
15+
sc-status: xdm.network.http.response_code

‎uncoder-core/app/translator/mappings/platforms/palo_alto_cortex/slack_slack.yml

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
platform: Palo Alto XSIAM
2+
source: slack_slack_raw
3+
4+
5+
default_log_source:
6+
dataset: slack_slack_raw
7+
8+
field_mapping:
9+
c-action: xdm.event.operation

‎uncoder-core/app/translator/mappings/platforms/palo_alto_cortex/webserver copy.yml

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
platform: Palo Alto XSIAM
2+
source: webserver
3+
4+
default_log_source:
5+
dataset: [apache_tomcat_raw, nginx_nginx_raw, apache_tomcat_raw]
6+
7+
field_mapping:
8+
c-uri: xdm.network.http.url
9+
c-useragent: xdm.source.user_agent
10+
cs-method: xdm.network.http.method
11+
cs-bytes: xdm.target.sent_bytes
12+
c-uri-query: xdm.network.http.url
13+
cs-referrer: xdm.network.http.referrer
14+
sc-status: xdm.network.http.response_code

0 commit comments

Comments
 (0)
pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy