All Apps and Add-ons

How to configure the Splunk for Palo Alto Networks app to index Palo Alto logs in Splunk?

pavanae
Builder

I had already installed the Splunk for Palo Alto Networks app in Splunk. Can anyone please tell what were the steps to proceed to get those logs and how to configure this in a detailed answer?

0 Karma
1 Solution

kent_farries
Path Finder

The documentation in the app is really good so I would start there and if your having troubles after following those detailed steps post the issue here.

https://splunkbase.splunk.com/app/491/#/documentation

If you are using Panorama to collected all your logs from all the PAN's then it is best to have Panorama forward the logs to the UDP port that you have configured in Splunk. If you don't have Panorama then you will need to configure each PAN Firewall to forward the logs to Splunk.

View solution in original post

kent_farries
Path Finder

The documentation in the app is really good so I would start there and if your having troubles after following those detailed steps post the issue here.

https://splunkbase.splunk.com/app/491/#/documentation

If you are using Panorama to collected all your logs from all the PAN's then it is best to have Panorama forward the logs to the UDP port that you have configured in Splunk. If you don't have Panorama then you will need to configure each PAN Firewall to forward the logs to Splunk.

Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In November, the Splunk Threat Research Team had one release of new security content via the Enterprise ...

Index This | Divide 100 by half. What do you get?

November 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

Stay Connected: Your Guide to December Tech Talks, Office Hours, and Webinars!

❄️ Celebrate the season with our December lineup of Community Office Hours, Tech Talks, and Webinars! ...