Tech articles explaining how to use Trisul in various environments.
To be read in conjunction with How to guides
Monitoring Palo Alto User-ID and App-ID attributes
Explains how to setup Trisul to optimally utilize the User-ID and App-ID support from Palo Alto. Explains how to add these metrics, how to tag flows with these fields, query by these attributes, dashboards.
Notes about the solarwinds incident