The configuration page in the Splunk for PaloAlto app appears to be broken for my installation. The configuration page has the title "Splunk_TA_paloalto" with a single text input box that contains {"customized_settings": {}}, with cancel and save buttons. I restarted Splunk after installation.
I'm running:
- Splunk Enterprise 6.2
- Palo Alto Networks Add-On for Splunk 3.8.2
- Palo Alto Networks App for Splunk 5.4.2
Versions 3.8.1/5.4.1 exhibited the same behaviour, so I removed them, restarted and installed the newer versions.
