Archive
Highlighted

Palo Alto App and TA on Splunk free license?

Dear all,

after upgrading Splunk to
Splunk Version 7.0.1
and upgrading
TA to 6.0.2
PA app to 6.0.1

I'm having problems accessing the configuration page:
Getting: Page not found!
for http://localhost:8000/en-US/app/Splunk_TA_paloalto

Also the front page is not showing any results, although most of the dashboards seem to be Ok.

I'm seeing some error messages that certain features are not available in the free version.
Are there any dependencies in the new App and TA which are not available with the free Splunk license? Didn't have any problems with the older versions.

Can I configure all settings manually by editing some config files?

Regards,
Andreas

Tags (2)
0 Karma
Highlighted

Re: Palo Alto App and TA on Splunk free license?

Not sure if that helps, but I tried to run a search for one of the panels from the dashboard manually and I get:

Error in 'TsidxStats': Could not find datamodel: pan_firewall

0 Karma
Highlighted

Re: Palo Alto App and TA on Splunk free license?

Might have been a problem with the upgrade.
Removed the apps and did a fresh install.
This solved the problem in my case

View solution in original post

0 Karma
Highlighted

Re: Palo Alto App and TA on Splunk free license?

SplunkTrust
SplunkTrust

If your problem is resolved, please accept the answer to help future readers.

---
If this reply helps you, an upvote would be appreciated.
0 Karma