All Apps and Add-ons
Highlighted

Tuning logs for Splunk App for Palo Alto

New Member

Does anyone have any recommendations on how to tune the logs for the App for Palo Alto?

I found the following Splunk Answers article that I've applied:

https://answers.splunk.com/answers/740273/how-to-filter-out-informational-logs-from-palo-alt.html

But with this change, a few dashboards just don't display events. I'm thinking that maybe I need to apply some filtering to the different sourcetype instead of the global pan:log.

0 Karma