# Filebeat 7.7 panw module sends THREAT, but not TRAFFIC logs

**URL:** https://discuss.elastic.co/t/filebeat-7-7-panw-module-sends-threat-but-not-traffic-logs/239792
**Category:** Beats
**Tags:** filebeat
**Created:** [July 3, 2020, 11:46am UTC](https://discuss.elastic.co/t/filebeat-7-7-panw-module-sends-threat-but-not-traffic-logs/239792 "2020-07-03T11:46:13Z")
**Posts on this page:** 1
**Showing post:** 7

<div class="post-metadata">

### Author: ![nverrill](https://avatars.discourse-cdn.com/v4/letter/n/7c8e57/32.png) [@nverrill](https://discuss.elastic.co/u/nverrill)
#### Post date: [July 22, 2020, 4:32pm UTC](https://discuss.elastic.co/t/filebeat-7-7-panw-module-sends-threat-but-not-traffic-logs/239792/7 "2020-07-22T16:32:08Z")

</div>

Versions here range from 7.1 to 8.1 which is within compatible ranges according to filebeat docs.  
I just confirmed that we customized our traffic output logs. Some fields had been trimmed from the output.  
I've now tested a default output and they are ingesting but with the wrong time zone in kibana, which appears to be a known issue where there is no timezone defined in the log itself:

> <https://github.com/elastic/beats/pull/13926>
>
> Similar to #13308, part of #13877, fixes elastic/beats#13867

> [@Filebeat-panw Module timezone issues](https://discuss.elastic.co/t/filebeat-panw-module-timezone-issues/202193/6):
>
> Sorry I explained that bad. My issue isn't the filebeats removing the event.timezone. This filebeats only exists to ingest that panos data for the SIEM app. My concern is that even with removing that field the data still was converted to 4 hours in the past. After changing the Kibana advance setting to UTC it set the data to the right time, but that also broke all the other data sources that come into ELK from various other applications. Their time instead of being correct was set to 4 hours i…

I'm a little uncertain how to fix this. I tried some of the fixes such as replacing the module/panw/panos/ingest/pipeline.yml in the pull request, as well as upgrading from filebeat 7.7.0 to 7.7.1 and it's still not the correct timezone in Kibana.

Is there something I can provide to help diagnose the issue?

---

_[View the full topic](https://discuss.elastic.co/t/filebeat-7-7-panw-module-sends-threat-but-not-traffic-logs/239792)._
