Authentication ASIM parser for Palo Alto PAN-OS GlobalProtect
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊
Parser Information
| Property | Value |
|---|---|
| Parser Name | ASimAuthenticationPaloAltoGlobalProtect |
| Built-in Parser | _ASim_Authentication_PaloAltoGlobalProtect |
| Schema | Authentication |
| Schema Version | 0.1.4 |
| Parser Type | 🔌 Source (product-specific) |
| Product | Palo Alto PAN-OS GlobalProtect |
| Parser Version | 0.1.0 (version history) |
| Last Updated | Apr 06, 2026 |
| Unifying Parser | ASimAuthentication |
| Source File | Parsers\ASimAuthentication\Parsers\ASimAuthenticationPaloAltoGlobalProtect.yaml |
Description
This ASIM parser supports normalizing Palo Alto PAN-OS GlobalProtect authentication logs from the CommonSecurityLog table to the ASIM Authentication normalized schema. GlobalProtect events include VPN gateway and portal authentication events.
Source Tables
This parser reads from the following tables:
| Table | Selection Criteria | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|---|
CommonSecurityLog |
DeviceEventClassID == "GLOBALPROTECT"DeviceProduct == "PAN-OS"DeviceVendor == "Palo Alto Networks" |
✓ | ✓ | ? |
Parameters
| Name | Type | Default |
|---|---|---|
disabled |
bool | False |
pack |
bool | False |
Associated Connectors
The following connectors provide data for this parser:
Solutions: Common Event Format, VirtualMetric DataStream, Zscaler Internet Access
References
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊