Getting Data In

How to get data from on premise Palo Alto Panorama to Splunk Cloud?

awesomeguan
New Member

Hi, We recently purchased Splunk Cloud and is on the process to get data into Splunk Cloud.

We have searched a Splunk and Palo Alto documentation regrading how to get on premise Panorama log data into Splunk Cloud, but there isn't much luck.

Most of the documents are for Splunk Enterprise.

Please provide guidance how to achieve it such as does it need to go via a on-premise Splunk heavy forwarder? or does it need to be sent to a syslog server on which a universal forwarder is installed, then it forwards data to on premise heavy forwarder, then to Splunk Cloud?

Any guidance is much appreciated.

Tags (2)
0 Karma

awesomeguan
New Member

We eventually use TCP port listening on heavy forwarder to send Palo Alto syslogs to Splunk Cloud. And it works perfectly fine.

0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...