All Apps and Add-ons

panupdate command

colinxb
New Member

I am trying to use the panupdate command to feed user/ip mapping data from splunk to PA. I have a search that is getting the addruser and addrip fields successfully. When I pipe my search to panupdate, however, I get the following error: Unknown search command 'panupdate'. I am running version 3.2 of the PAN app, and have verified that the panupdate command is installed, according to the app's 'view objects' manifest. Any suggestions?

0 Karma

colinxb
New Member

Disregard this. I figured the problem out. I was trying to use the panupdate command from the main search app, not from within the PaloAlto app. Using panupdate within the PA app works great.

0 Karma
Get Updates on the Splunk Community!

Aligning Observability Costs with Business Value: Practical Strategies

 Join us for an engaging Tech Talk on Aligning Observability Costs with Business Value: Practical ...

Mastering Data Pipelines: Unlocking Value with Splunk

 In today's AI-driven world, organizations must balance the challenges of managing the explosion of data with ...

Splunk Up Your Game: Why It's Time to Embrace Python 3.9+ and OpenSSL 3.0

Did you know that for Splunk Enterprise 9.4, Python 3.9 is the default interpreter? This shift is not just a ...