Why are Splunk for Palo Alto Networks Traffic and Wildfire dashboards suddenly not displaying?

[rodgerkrau]

Palo App for Splunk all of a sudden not displaying traffic dashboard or Wildfire. All other content working.

[ccscott]

This kinda sucks. I don't think it has ever worked though. Just one more thing in splunk that doesn't work and isn't supported by them. So far splunk has been the biggest waste of money ever.

[madc0w]

There is a bug and hopefully the developers will fix in a new version.

http://answers.splunk.com/answers/203043/pan-wildfirereport-and-pan-newapps-bug.html

[rodgerkrau]

Still an issue.. anyone else know a "fix"

[ppablo]

Hi @rodgerkrau

You might want to contact the developer of the app directly if you're not having any luck here in the Answers community. Their contact info is in the bottom right panel of the app's page http://apps.splunk.com/app/491/

[rodgerkrau]

I cant open an item directly (in the search) from the actual dashboard. no items display.

here is the code: | tstats sum(bytes_received) AS sbr sum(bytes_sent) AS sbs FROM pan_traffic WHERE earliest=-60m latest=now groupby app | eval sumBytes = sbr + sbs | stats values(sumBytes) AS Bytes by app

[Lucas_K]

Check that someone hasn't disabled any savedsearches or data models that these rely on.

[rodgerkrau]

I get results!

[barakreeves]

from the search, what happens when you run: sourcetype=pan_wildfire_report OR sourcetype=pan_traffic ?