All Apps and Add-ons

Splunk for Palo Alto Networks 4.2.2 and Splunk 6.3.0 : I am receiving and can search logs, but why is the dashboard not populating?

New Member


Splunk for Palo Alto Networks 4.2.2 and Splunk 6.3.0, dashboard not populating. I'm receiving logs and can search on them, but dashboards are empty.


0 Karma


I'd guess:

The app assumes your data is in a "searched by default" index, and maybe it isn't any more.
The app uses an 'index=blah' or a macro that loads a line like that and the index it points to is wrong.
The app uses tags, events or both, and those are no longer being applied correctly.

I know of no magic bullet at this time, you just have to start digging into the searches to see what they are running, then start digging and fiddling to find out why they aren't running.

0 Karma
Get Updates on the Splunk Community!

Admin Your Splunk Cloud, Your Way

Join us to maximize different techniques to best tune Splunk Cloud. In this Tech Enablement, you will get ...

Cloud Platform | Discontinuing support for TLS version 1.0 and 1.1

Overview Transport Layer Security (TLS) is a security communications protocol that lets two computers, ...

New Customer Testimonials

Enterprises of all sizes and across different industries are accelerating cloud adoption by migrating ...