time entry in UID XML API

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

time entry in UID XML API

L1 Bithead

Hello,

We are using the User-ID XML API, but have additional need to add also the time entry from external source.

In example:

<uid-message>
<version>1.0</version>
<type>update</type>
<payload>
         <login>
                 <entry name="domain\uid1" ip="10.1.1.1"/>  # Somehow add entry time=XXXXXX
                 <entry name="domain\uid2" ip="10.1.1.2"/>
                 <entry name="domain\uid3" ip="10.1.1.3"/>
         </login>
         <logout>
                 <entry name="domain\uid4" ip="10.1.1.4"/>
         </logout>
</payload>
</uid-message>

What do you think. Is is possible with the current software at all? Do you have any other suggestions?

Thank you!

1 REPLY 1

Palo Alto Networks Guru

I know that this reply is pretty late and I apologize for that. I'm afraid, but the answer is no. The User-ID Agent takes the time from the time the message was submitted to it.

Can you give me a little bit more detail on the scenario and why you need to add the time value?

  • 2279 Views
  • 1 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!