Getting Data In

SourceType 'pan_log' not listed when adding new DataInput for PaloAlto

gooon26
New Member

Hi

When i try to configure a new UDP data input in my splunk to work with PaloAlto it only list these source types

Access_combined
apache_error
csv
iis
log4j
log4php
syslog

How can i install the sourcetype 'pan_log'

Best regard

Gonzalo

0 Karma

radam2000
Path Finder

Actually i believe you need to install the paloalto add-on instead of the app

Splunk_TA_paloalto

Now at version 6.1.1 i believe

0 Karma

rgaleone1
Path Finder

Have you installed the Palo Alto App?

0 Karma

matthieulopez
Engager

same problem
do you find an issue?

0 Karma
Get Updates on the Splunk Community!

March Community Office Hours Security Series Uncovered!

Hello Splunk Community! In March, Splunk Community Office Hours spotlighted our fabulous Splunk Threat ...

Stay Connected: Your Guide to April Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars in April. This post ...

Want to Reduce Costs, Mitigate Risk, Improve Performance, or Increase Efficiencies? ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...