https://community.splunk.com/t5/Getting-Data-In/incomplete-field-extraction/m-p/705527#M116703 <P>It might be that they forgot it or didn't consider it important for the primary use case. This add-on is Splunk supported, so if you have a support contract then you could reach out to Splunk support.</P> Thu, 28 Nov 2024 20:20:46 GMT marnall 2024-11-28T20:20:46Z https://community.splunk.com/t5/Getting-Data-In/incomplete-field-extraction/m-p/704043#M116447 <P>Is there a reason why the auth-success is excluded from the system_actions.csv lookup file in the Splunk Add-on for palo alto networks TA version 1.0.0 that was just released.&nbsp;</P><P>This is breaking auth events as only failures are being parsed.&nbsp;</P><P>&nbsp;</P> Sun, 10 Nov 2024 17:14:13 GMT https://community.splunk.com/t5/Getting-Data-In/incomplete-field-extraction/m-p/704043#M116447 okeyalex 2024-11-10T17:14:13Z https://community.splunk.com/t5/Getting-Data-In/incomplete-field-extraction/m-p/705527#M116703 <P>It might be that they forgot it or didn't consider it important for the primary use case. This add-on is Splunk supported, so if you have a support contract then you could reach out to Splunk support.</P> Thu, 28 Nov 2024 20:20:46 GMT https://community.splunk.com/t5/Getting-Data-In/incomplete-field-extraction/m-p/705527#M116703 marnall 2024-11-28T20:20:46Z