All Apps and Add-ons

After Installing Palo Alto App in Splunk performance is degraded

raomu
Explorer

Hi,

We recently have deployed Palo Alto App in our environment and noticed performance is degraded.

I went to see all the searched running under Job -> activity

and see most of the jobs are executed under System-user and all are related to Palo Alto that too span of every 2 min.

Spunk Environment details :

Spunk Managed cloud service
24 Indexers
2 SH not in cluster mode

Any suggestion why so many jobs are running for Palo Alto ?

Tags (1)
0 Karma

micahkemp
Champion

Can you include the details (name, search) of the jobs you noticed?

0 Karma

raomu
Explorer

user name - Spunk-System-User
search1 says - WildFire Reports - Retrieve Report
search 2 says - Applications - Retrieve New Apps

like this there are many reports and query.

0 Karma

raomu
Explorer

within 3 min this job has triggered twice

WildFire Reports - Retrieve Report

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...