I am getting the correct data into splunk and it is being transformed correctly from pan:log to pan:traffic.
But in the palo alto app, I cannot see a traffic dashboard, it is just not there.
I am also only sending traffic data from panorama.
Has anyone seen this issue before or has any ideas why it may happen?
@FraserC1 I do believe that this app is datamodel driven. Are your datamodels accelerated? And are they returning data?
The data models are accelerated and they do return events.