Getting Data In

SourceType 'pan_log' not listed when adding new DataInput for PaloAlto

gooon26
New Member

Hi

When i try to configure a new UDP data input in my splunk to work with PaloAlto it only list these source types

Access_combined
apache_error
csv
iis
log4j
log4php
syslog

How can i install the sourcetype 'pan_log'

Best regard

Gonzalo

0 Karma

radam2000
Path Finder

Actually i believe you need to install the paloalto add-on instead of the app

Splunk_TA_paloalto

Now at version 6.1.1 i believe

0 Karma

rgaleone1
Path Finder

Have you installed the Palo Alto App?

0 Karma

matthieulopez
Engager

same problem
do you find an issue?

0 Karma
Get Updates on the Splunk Community!

Database Performance Sidebar Panel Now on APM Database Query Performance & Service ...

We’ve streamlined the troubleshooting experience for database-related service issues by adding a database ...

IM Landing Page Filter - Now Available

We’ve added the capability for you to filter across the summary details on the main Infrastructure Monitoring ...

Dynamic Links from Alerts to IM Navigators - New in Observability Cloud

Splunk continues to improve the troubleshooting experience in Observability Cloud with this latest enhancement ...