Source types for the Splunk Add-on for Palo Alto Networks

The Splunk Add-on for Palo Alto Networks has the following source types.

Source type	Description	Event type	CIM data models
pan:system	PAN OS system events	pan_system pan_system_auth pan_system_alert pan_system_change	Authentication Change
pan:decryption	PAN OS decryption events	pan_decryption	Network Traffic
pan:traffic	PAN OS traffic events	pan_traffic pan_traffic_end pan_traffic_start	Network Traffic
pan:threat	PAN OS threat events	pan_threat pan_file pan_url pan_email pan_data pan_virus pan_spyware	Intrusion Detection Web
pan:config	PAN OS config events	pan_config	Change
pan:hipmatch	PAN OS hipmatch events	pan_hipmatch	Intrusion Detection
pan:correlation	PAN OS correlation events	pan_correlation	Alerts
pan:userid	PAN OS userid events	pan_userid pan_userid_login pan_userid_logout	Authentication Change
pan:globalprotect	GLOBALPROTECT events	pan_global_protect	Authentication
pan:firewall:cloud	Events coming from Strata Logging Service	pan_traffic pan_threat pan_system pan_decryption pan_spyware pan_globalprotect pan_wildfire pan_correlation pan_email pan_data pan_virus pan_file pan_url pan_wildfire_malicious pan_traffic_end pan_traffic_start	Network Traffic Intrusion Detection Authentication Alerts
pan:threat:cloud	pan:firewall:cloud events with LogType THREAT	pan_firewall pan_threat pan_file pan_url pan_data pan_virus pan_spyware pan_wildfire_malicious pan_wildfire pan_email	Web Intrusion Detection
pan:traffic:cloud	pan:firewall:cloud events with LogType TRAFFIC	pan_firewall pan_traffic pan_traffic_start pan_traffic_end	Network Traffic Intrusion Detection
pan:system:cloud	pan:firewall:cloud events with LogType SYSTEM	pan_firewall pan_system pan_system_auth pan_system_alert pan_system_change	Authentication
pan:config:cloud	pan:firewall:cloud events with LogType CONFIG	pan_firewall pan_config	Change
pan:globalprotect:cloud	pan:firewall:cloud events with LogType GLOBALPROTECT	pan_firewall pan_globalprotect	Authentication
pan:decryption:cloud	pan:firewall:cloud events with LogType DECRYPTION	pan_firewall pan_decryption	Network Traffic
pan:iot_alert	IoT Alerts events	pan_iot_alert	Alerts
pan:pan_iot_device	IoT Device Events	pan_iot_device	Inventory
pan:data:security	Data Security events	pan_data_security_activity pan_data_securiy_incidents pan_data_security_remediation pan_data_security_policy_violation	Alerts Ticket Management
pan:xdr:incident	Cortex XDR Incidents	pan_xdr_incident pan_xdr_incident_detailed	Ticket Management
pan:xdr:incident:alert	Cortex XDR Incident alerts	pan_xdr_incident_alert	Alerts