OOTB Marketplace Parser Name Mapping Is Misaligned

[sva-s1]

Example: Choose Netskope as a source.

Events don’t initially show up under XDR view as they don’t use the OOTB Marketplace parser name.

Events show up with this parser name:
netskope_netskope_logs-latest

Instead of:
marketplace-netskopecloudlogshipperjson-latest

Quick way to find in ALL view:
parser contains ‘netskope'

Work-around is to manually copy/paste into the new empty placeholder.

[HermessNRJ]

Hello, I just made a PR #37 that allows certain parser names to be fixed. However, there are some that I haven't changed: all those that correspond to legacy parsers (Apache, for example), those that communicate with S1 directly via API (Okta, for example), and those that are “built-in” (S1 agent log/evtx, for example). So there is certainly room for improvement in this area...

[sva-s1]

Thank you!