Request for SpanVA Palo Alto Log Format Details & Sample logs

Products

• CASB Securlet SAAS
• CASB Audit
• CASB Gateway
• CASB Gateway Advanced
• CASB Security Advanced
• CASB Security Advanced IAAS
• CASB Security Premium
• CASB Security Premium IAAS
• CASB Security Standard
• CASB Securlet IAAS

Issue/Introduction

Client has questions about Palo Alto Log format used to feed CloudSOC Audit through SpanVA.

Which Log Format Type Are available?

Any relevant documentation or specifications for the chosen format?

Client also requested sample logs from their existing CloudSOC Audit - Palo Alto Data Source

 

Resolution

Palo Alto Required Traffic Log Fields

Typical Heading Row

Syslog or csv are the log format choices in CloudSOC / Audit Device Logs / Create New DataSource:

 

Additional Information

CloudSOC (CASB) Support can obtain sample logs from Client's CloudSOC tenant if client logs a CASB Support case requesting sample logs and provides the datasource IDs.

Then CASB Support can log in and download a sample.