https://live.paloaltonetworks.com/t5/general-topics/paloalto-don-t-send-log-correctly-to-logstash/m-p/422999#M94126 <P>&nbsp;you looked into customizing the fields sent in log forwarding?&nbsp;</P> Thu, 29 Jul 2021 10:44:02 GMT reaper 2021-07-29T10:44:02Z https://live.paloaltonetworks.com/t5/general-topics/paloalto-don-t-send-log-correctly-to-logstash/m-p/421977#M94068 <P>Hi evrey one,<BR />I'am new to Paloalto and I have a problem with the threath log. I am currently using ELK stack to store and visualize all log from paloalto.&nbsp;<BR />When I send the traffic log to logstash there is no problem (there are all field explained in the documentation), but when i send the threat log all the field explained in the documentation are missing, the only field are ip (source and destination), severity and the domain.<BR />Is that normal or I have to implement something?</P> Mon, 26 Jul 2021 07:10:17 GMT https://live.paloaltonetworks.com/t5/general-topics/paloalto-don-t-send-log-correctly-to-logstash/m-p/421977#M94068 Betorov 2021-07-26T07:10:17Z https://live.paloaltonetworks.com/t5/general-topics/paloalto-don-t-send-log-correctly-to-logstash/m-p/422999#M94126 <P>&nbsp;you looked into customizing the fields sent in log forwarding?&nbsp;</P> Thu, 29 Jul 2021 10:44:02 GMT https://live.paloaltonetworks.com/t5/general-topics/paloalto-don-t-send-log-correctly-to-logstash/m-p/422999#M94126 reaper 2021-07-29T10:44:02Z