Hi,
I would like to know how to work "Palo Alto Networks App for Splunk" in Splunk version 7.0.2, which version is 5.3.1.
I have already install "Palo Alto Networks Add-on for Splunk" which version is 3.7.1.
pan_traffic and pan_threat could be searched and show the folowing fields.
eventtype=pan
eventtype=pan_threat
eventtype=pan_traffic
Additionally, these datamodels which are "Palo Alto Networks Firewall Logs" and "Network Traffic" have been acceleration.
But this app is not working...
I have known that SplunkBase show this version is not applied with Splunk 7.x.
Actually I would like not to change this version, because these visualisation would be changed a lot.
Are there any way to use this app version? Or Do I have to change the app version which is over6.0.x.?
If someone counl work this app version fine in same case, please let me know which settings you changed. Also please check whether you are getting these error.
Error message1:
File "/opt/splunk/etc/apps/SplunkforPaloAltoNetworks/bin/lib/common.py", line 182, in exit_with_error
Error message2:
2018-02-26 13:08:01,026 +0900 ERROR common:182 - File "/opt/splunk/etc/apps/SplunkforPaloAltoNetworks/bin/retrieveWildFireReport.py", line 143, in
If you need more info to solve this issue, please let me know.
I appreciate any anwers.
Best regard,
