Commit79c0807

committed

field mapping update

1 parent9eed876 commit79c0807Copy full SHA for 79c0807

File tree

+39

-16

lines changed

uncoder-core/app/translator/mappings/platforms/qradar
- proxy.yml
- webserver.yml

+39

-16

lines changed

Lines changed: 10 additions & 3 deletions

Original file line number	Diff line number	Diff line change
`@@ -13,13 +13,16 @@ field_mapping:`
`13`	`13`	`-URL`
`14`	`14`	`-XForceCategoryByURL`
`15`	`15`	`c-useragent:User Agent`
`16`		`-cs-method:HTTP Method`
	`16`	`+cs-method:`
	`17`	`+ -HTTP Method`
	`18`	`+ -Method`
`17`	`19`	`cs-bytes:Bytes Sent`
`18`	`20`	`#cs-cookie-vars: cs-cookie-vars`
`19`	`21`	`c-uri-extension:URL`
`20`	`22`	`c-uri-query:`
`21`	`23`	`-URL`
`22`	`24`	`-URL Path`
	`25`	`+ -URL Query String`
`23`	`26`	`#cs-cookie: cs-cookie`
`24`	`27`	`cs-host:`
`25`	`28`	`-UrlHost`
`@@ -32,6 +35,10 @@ field_mapping:`
`32`	`35`	`r-dns:`
`33`	`36`	`-UrlHost`
`34`	`37`	`-URL Host`
`35`		`-sc-status:HTTP Response Code`
	`38`	`+sc-status:`
	`39`	`+ -HTTP Response Code`
	`40`	`+ -Response Code`
`36`	`41`	`#post-body: post-body`
`37`		`-url_category:XForceCategoryByURL`
	`42`	`+url_category:`
	`43`	`+ -XForceCategoryByURL`
	`44`	`+ -Web Category`

Lines changed: 29 additions & 13 deletions

Original file line number	Diff line number	Diff line change
`@@ -9,17 +9,33 @@ default_log_source:`
`9`	`9`	`devicetype:10`
`10`	`10`
`11`	`11`	`field_mapping:`
`12`		`-c-uri:URL`
`13`		`-c-useragent:c-useragent`
`14`		`-cs-method:cs-method`
	`12`	`+c-uri:`
	`13`	`+ -URL`
	`14`	`+ -XForceCategoryByURL`
	`15`	`+c-useragent:User Agent`
	`16`	`+cs-method:`
	`17`	`+ -HTTP Method`
	`18`	`+ -Method`
`15`	`19`	`cs-bytes:Bytes Sent`
`16`		`-cs-cookie-vars:cs-cookie-vars`
`17`		`-c-uri-extension:c-uri-extension`
`18`		`-c-uri-query:URL`
`19`		`-cs-cookie:cs-cookie`
`20`		`-cs-host:cs-host`
`21`		`-cs-referrer:URL Referrer`
`22`		`-cs-version:cs-version`
`23`		`-r-dns:r-dns`
`24`		`-sc-status:sc-status`
`25`		`-post-body:post-body`
	`20`	`+#cs-cookie-vars: cs-cookie-vars`
	`21`	`+c-uri-extension:URL`
	`22`	`+c-uri-query:`
	`23`	`+ -URL`
	`24`	`+ -URL Path`
	`25`	`+ -URL Query String`
	`26`	`+#cs-cookie: cs-cookie`
	`27`	`+cs-host:`
	`28`	`+ -UrlHost`
	`29`	`+ -URL Host`
	`30`	`+ -URL Domain`
	`31`	`+cs-referrer:`
	`32`	`+ -URL Referrer`
	`33`	`+ -Referrer URL`
	`34`	`+cs-version:HTTP Version`
	`35`	`+r-dns:`
	`36`	`+ -UrlHost`
	`37`	`+ -URL Host`
	`38`	`+sc-status:`
	`39`	`+ -HTTP Response Code`
	`40`	`+ -Response Code`
	`41`	`+#post-body: post-body`

Comments

(0)