Palo Alto Networks App for Splunk: Does the current version of the TA handle Correlation Engine events?

[goodsellt]

Does the current version of the TA handle Correlation Engine events? Or if not, is that planned in an upcoming version?

I'm not on the newest version (3.7) yet, however, in my current version, those logs are staying in pan:log and the change notes haven't mentioned them yet, as the only new log type mentioned was the GlobalProtect logs.

[btorresgil · Accepted solution]

Hello,

Yes, this feature is coming soon! It will be in a future release of the TA, after version 3.7.

-Brian

[goodsellt]

Glad to hear, thanks!