All Apps and Add-ons

Received event for unconfigured/disabled/deleted

Finisar
New Member

I have configured the above settings as described, I see the below msg. Are there are any more settings that needs to be done to capture the events.

received event for unconfigured/disabled/deleted index='pan_log' with source='source::udp:514' host='host::xx.xx.xx.xx' sourcetype='sourcetype::pan_threat' (1 missing total)

0 Karma

Finisar
New Member

Ya, thanks a lot for correcting me.

0 Karma

monzy
Communicator

Your error is probably due to a typo in your inputs.conf file. The Palo alto apps index is pan_logs and not the singular pan_log. Please edit your inputs.conf.

Cheers,

Monzy

0 Karma
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...