Hi, We recently purchased Splunk Cloud and is on the process to get data into Splunk Cloud.
We have searched a Splunk and Palo Alto documentation regrading how to get on premise Panorama log data into Splunk Cloud, but there isn't much luck.
Most of the documents are for Splunk Enterprise.
Please provide guidance how to achieve it such as does it need to go via a on-premise Splunk heavy forwarder? or does it need to be sent to a syslog server on which a universal forwarder is installed, then it forwards data to on premise heavy forwarder, then to Splunk Cloud?
Any guidance is much appreciated.
