# Add field to filebeat Panos module

**URL:** <https://discuss.elastic.co/t/add-field-to-filebeat-panos-module/379803>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [July 4, 2025, 8:23am UTC](https://discuss.elastic.co/t/add-field-to-filebeat-panos-module/379803 "2025-07-04T08:23:40Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Lero](https://avatars.discourse-cdn.com/v4/letter/l/a88e57/32.png) [@Lero](https://discuss.elastic.co/u/Lero)\
**Post date:** [July 4, 2025, 8:23am UTC](https://discuss.elastic.co/t/add-field-to-filebeat-panos-module/379803/1 "2025-07-04T08:23:40Z")

</div>

Hi,  
Using the Panos module for filebeat:  
the field "threat category" (eg dns-proxy) isn't currently parsed into a dedicated field but is dropped and part of the event.original field. This could be a valuable field for threat hunting in our use case. Is there a possibility to include this field into the module?