I have installed a app of palo alto firewall in my splunk cloud. an someone please help me how an i connect splunk and palo alto firewall with each other. what are the steps. I am confused. which permission do i need to do this configuration. In splunk cloud documentation, a lots of material is for the splunk enterprise not for splunk cloud.
Palo Alto can't send directly to Splunk Cloud. Direct your PAN logs to a Splunk forwarder (perhaps on a syslog server) that sends the data to Splunk Cloud.
--- If this reply helps you, Karma would be appreciated.
Palo Alto can't send directly to Splunk Cloud. Direct your PAN logs to a Splunk forwarder (perhaps on a syslog server) that sends the data to Splunk Cloud.
--- If this reply helps you, Karma would be appreciated.
Check Panorama documentation and create a syslog destination. You'll need a distinct syslog server. Use Rsyslog or syslog-NG. Install a universal forwarder on the same machine that forwards the collected panorama logs to your Splunk syslog installation. Good Luck!
