LEEF Log Format to Standard Log Format Extension

 As of Palo Alto Networks App for QRadar version 1.1.0, we have exclusively switched to LEEF log format support. Below are the details on how to install our standard log extension. This will overwrite the custom properties to use standard log format.

Palo Alto Networks App for QRadar Troubleshooting Guide

Panels are not showing any data

1. Check to see if logs are being forwarded properly

Confirm you are receiving LEEF log format in QRadar, navigate to the “Log Activity” tab of QRadar and create an advanced search:

Palo Alto Networks Application for QRadar

Overview

Palo Alto Networks and IBM have partnered to deliver advanced security reporting and analytics to the the widely used IBM® QRadar® SIEM. Integrate QRadar seamlessly with the Palo Alto Networks platform to streamline operations and improves s