mirror of
https://github.com/marcredhat/SIEM-toolkit-patched
synced 2026-06-08 12:33:51 +00:00
81e3656c46
1. Exact dataSource.name match 2. Normalized substring on parser's dataSource.name attribute 3. Normalized substring on parser filename (catches files with wrong ds name) Fixes CloudTrail (filename aws_cloudtrail-latest matches "cloudtrail") and Palo Alto Networks Firewall (ds name "Palo Alto Networks" matches via substring). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>