Getting Data In

How to get data from on premise Palo Alto Panorama to Splunk Cloud?

awesomeguan
New Member

Hi, We recently purchased Splunk Cloud and is on the process to get data into Splunk Cloud.

We have searched a Splunk and Palo Alto documentation regrading how to get on premise Panorama log data into Splunk Cloud, but there isn't much luck.

Most of the documents are for Splunk Enterprise.

Please provide guidance how to achieve it such as does it need to go via a on-premise Splunk heavy forwarder? or does it need to be sent to a syslog server on which a universal forwarder is installed, then it forwards data to on premise heavy forwarder, then to Splunk Cloud?

Any guidance is much appreciated.

Tags (2)
0 Karma

awesomeguan
New Member

We eventually use TCP port listening on heavy forwarder to send Palo Alto syslogs to Splunk Cloud. And it works perfectly fine.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

 (view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...