search

criblpacks / cribl-palo-alto-networks

Process, reduce, and transform Palo Alto Networks Firewall logs.
Apache License 2.0
13 stars 7 forks source link

pan_correlation using old TZ adjustment which sets _time to null #29

Closed ohoppe-dev closed 12 months ago

ohoppe-dev commented 1 year ago 
  timeExpression: "__tz ? (time.getTime() / 1000) + (__tz * 3600) :
    (time.getTime() / 1000)"

to

  timeExpression: "__tz ? C.Time.adjustTZ(time.getTime(), 'UTC', __tz) / 1000 :
    time.getTime() / 1000"