All Apps and Add-ons

Is there an easier way of viewing evidence from correlation events in the Palo Alto Networks App for Splunk?


The 'Network Security' dashboard includes the Top Correlation Events. Is there an easy way within the Palo Alto Networks App to view the corresponding "evidence", similar to what Panorama shows?


Your welcome to create a custom panel. We have a macro set up to get all correlated logs.

0 Karma


I know this is an old thread but any chance you could post the logic of your macro? 

0 Karma
.conf21 Now Fully Virtual!
Register for FREE Today!

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!