How do I ingest IP addresses in the GitHub audit log into Panther?
As mentioned in GitHub's documentation:
If you choose to display IP addresses, the IP addresses only appear in your enterprise’s audit log. IP addresses will not appear for events in the audit logs for individual organizations owned by your enterprise.
Panther currently only ingests organization audit logs. However, we are actively working on the GitHub Enterprise Audit Log integration.