I discovered on the Data Model Audit dashboard had some referenced to a missing data model. I changed the search macros used by this dashboard to replace pan_endpoint with pan_traps and the error has be cleared
I have this same problem after I updated the App Splunk Palo Alto. I'm a Splunk beginner and can you please detail how to make this change? appreciate
I changed by replacing in the image, but it didn't work.
Did you have a question you were looking for an answer to?
Nope. I didn't see where I could log a bug on this add-on and wanted others to avoid my headache.
You can report bugs directly on github. The add-on is available here:
https://github.com/PaloAltoNetworks/Splunk_TA_paloalto