https://community.splunk.com/t5/Getting-Data-In/Firewall-logs-validation-in-SPlunk/m-p/681521#M113869 <P>We have multiple firewalls and different locations and each location we have syslog collector server and its forward the logs to splunk indexer.&nbsp;</P><P>Pan: traffic count 27,644,629 83%<BR />Pan:threat count 3,224,543 9.77%<BR />Pan:firewall_cloud 2,034,183 6.18%<BR /><BR />last one hour data. it looks like over utilization, so we want to validate receiving logs are legitimate or not?&nbsp;<BR />Planning to reduce consumption of firewall logs.</P><P>&nbsp;Please guide me how can i validate firewall logs we are reciving correct logs or any excessive or not needed?</P> Thu, 21 Mar 2024 10:59:12 GMT sankardevarajan 2024-03-21T10:59:12Z https://community.splunk.com/t5/Getting-Data-In/Firewall-logs-validation-in-SPlunk/m-p/681521#M113869 <P>We have multiple firewalls and different locations and each location we have syslog collector server and its forward the logs to splunk indexer.&nbsp;</P><P>Pan: traffic count 27,644,629 83%<BR />Pan:threat count 3,224,543 9.77%<BR />Pan:firewall_cloud 2,034,183 6.18%<BR /><BR />last one hour data. it looks like over utilization, so we want to validate receiving logs are legitimate or not?&nbsp;<BR />Planning to reduce consumption of firewall logs.</P><P>&nbsp;Please guide me how can i validate firewall logs we are reciving correct logs or any excessive or not needed?</P> Thu, 21 Mar 2024 10:59:12 GMT https://community.splunk.com/t5/Getting-Data-In/Firewall-logs-validation-in-SPlunk/m-p/681521#M113869 sankardevarajan 2024-03-21T10:59:12Z