PaloAlto APP Eventgen

[oda]

In the old Paloalto APP there was an Eventgen but I can not find it now.
I want to generate a log automatically, is not there a good way?

Thanks guys.

[jkat54]

You can download version 3.8.2, and copy the samples directory and eventgen.conf file from the 3.8.2 version to your new 6.x version.

https://splunkbase.splunk.com/app/2757/

To download an older version, use the version selection drop down on the right side of the page at the link above.

[oda]

I'm sorry I did not understand simple things.
I downloaded it and moved on directory of /opt/splunk/app/etc/apps/Splunk_TA_paloalto/default/ and /opt/splunk/app/etc/apps/Splunk_TA_paloalto/sample/...

However, it does not move.
Is there anything else you must do?

[jkat54]

Make sure you have eventgen installed and you copied the files and folders
Exactly as they are named in the older version of the app.

See th eventgen app details page for more details:

https://splunkbase.splunk.com/app/1924/#/details