How do I ingest IP addresses in the GitHub audit log into Panther?
If you are ingesting GitHub logs into Panther via the GitHub API (at the organization level), you can configure GitHub to display the source IP for events in your audit logs by following these instructions on GitHub's documentation.
If you are ingesting GitHub logs into Panther via GitHub audit log streaming (at the enterprise level), you can configure GitHub to display the source IP for events in your audit logs by following these instructions on GitHub's documentation.