This seems like a straightforward question about running a script after schema installation and upgrade, but before data setup. I'll need to carefully consider the options to determine the best approach.
This is a tricky one. I'm not super familiar with the Palo Alto interface, so I'm not sure where to find the information I need. I think I'll start by checking the application details in the beacon, just to get a better understanding of how this application is configured.
I'm pretty confident the answer is A. All the universal forwarders need the parsing configurations to set the indexed field with the host name. The question is pretty clear on that.
Elizabeth
10 months agoGennie
10 months agoOneida
10 months agoJesusa
11 months agoLouisa
11 months agoEsteban
11 months agoLourdes
11 months agoIsaiah
11 months agoEvangelina
11 months agoVicki
11 months agoMargret
11 months agoFreeman
11 months agoKimi
11 months agoStevie
11 months ago