Add OCSF rule and template for paloalto network traffic logs

Signed-off-by: Krishna Kondaka <[email protected]>
opensearch-project · Oct 19, 2024 · 4873155 · 4873155
1 parent 09ed988
commit 4873155
Show file tree

Hide file tree

Showing 4 changed files with 687 additions and 1 deletion.
diff --git a/data-prepper-plugins/ocsf/build.gradle b/data-prepper-plugins/ocsf/build.gradle
@@ -0,0 +1,6 @@
+
+dependencies {
+    implementation project(':data-prepper-api')
+}
+
+
diff --git a/...rc/main/resources/org/opensearch/dataprepper/transforms/rules/ocsf-panw-traffic-rule.yaml b/...rc/main/resources/org/opensearch/dataprepper/transforms/rules/ocsf-panw-traffic-rule.yaml
@@ -0,0 +1,6 @@
+plugin_name: "ocsf-panw-traffic"
+apply_when:
+  - "$..processor[?(@.ocsf.type == 'PALOALTO_NETWORKS_TRAFFIC_LOGS')]"
+  - "$..processor[?(@.ocsf.version == '1.0')]"
+
+