Solved: Palo Alto Networks App for Splunk: Why are there n... - Splunk Community

All Apps and Add-ons

Why no support for the Global Protect logs in pan:system logs? Shouldn't these get extracted and tagged for authentication datamodel?

1 Solution

Solution

Take a look at this answer as well. It is related. Coming in a future version was the response.
https://answers.splunk.com/answers/386222/support-for-the-authentication-and-network-session.html

View solution in original post

Solution

Take a look at this answer as well. It is related. Coming in a future version was the response.
https://answers.splunk.com/answers/386222/support-for-the-authentication-and-network-session.html

Yes, that is what we are looking for, sometimes searching Splunk answers can be bit challenging.

Get Updates on the Splunk Community!

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...

Can’t Make It to Boston? Stream .conf25 and Learn with Haya Husain

Boston may be buzzing this September with Splunk University and .conf25, but you don’t have to pack a bag to ...

Splunk Lantern’s Guide to The Most Popular .conf25 Sessions

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...