PANW schema bugs take 2

Hello,

Could someone please take a look at:

And confirm this is a bug?

This is generating confusion.... As source.bytes and destination.bytes are quite important field in a very important dataset, this should be handled asap imho.....

Grtz

Willem

1 Like

@andrewkroh Thanks for taking action on this. Please have a look at my comment on event.end in https://github.com/elastic/beats/pull/18525