Dashboards & Visualizations

Dashboard is not populating

chrisdalhoe
New Member

My App: Palo Alto Networks is not populating any data. I am able to do searches on my index="pan_logs" and also the host="x.x.x.x".

Any ideas where I can start troubleshooting? Any help is appreciated. Thanks!

Tags (1)
0 Karma

btorresgil
Builder

First, I recommend upgrading to the latest version of the App (v5.0.x) which no longer uses the pan_logs index. Then, use the getting started guide to get set up, and the troubleshooting guide to figure out what is wrong:

Getting Started:
http://pansplunk.readthedocs.org/en/latest/getting_started.html

Troubleshooting:
http://pansplunk.readthedocs.org/en/latest/troubleshoot.html

Let us know if you're still having trouble after going through the guide.

jkat54
SplunkTrust
SplunkTrust

Start with the job inspector. See if the dashboard searches are failing and if so for what reason. Check index=_internal for ERROR or WARN.

0 Karma
Get Updates on the Splunk Community!

🔐 Trust at Every Hop: How mTLS in Splunk Enterprise 10.0 Makes Security Simpler

From Idea to Implementation: Why Splunk Built mTLS into Splunk Enterprise 10.0  mTLS wasn’t just a checkbox ...

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...