Join the Conversation
- Find Answers
- :
- Splunk Products
- :
- Splunk Cloud Platform
- :
- Re: Splunk Cloud
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Is there any difference between the splunk enterprise and splunk cloud's configuration. and how can i configure palo alto firewall and splunk cloud so Splunk cloud an ingest some data from palo alto firewall.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Fundamentally they are the exact same product, however there are a few differences in the level of access you have to some of the performance tuning elements, and of course you dont have direct access to the configuration files for Splunk Cloud.
Most settings can be managed via the Cloud UI, and for some specifc use cases you can ask Splunk Support to make changes which would need access to the files directly.
Most applictions and TA's can be deployed to both platforms, but there are some specialist applications which can not be deployed to Splunk cloud.
To collect data from PA, you install a heavy forwarder on site and install the PA-TA onto your heavy forwarder where you have full contol. Your HF then sends your log data to either Splunk Enterprise (on Prem) or Splunk Cloud.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
An alternative to installing the PA app on an HF is to send data from the PA to syslog and use a UF on the syslog server to send to SplunkCloud.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Fundamentally they are the exact same product, however there are a few differences in the level of access you have to some of the performance tuning elements, and of course you dont have direct access to the configuration files for Splunk Cloud.
Most settings can be managed via the Cloud UI, and for some specifc use cases you can ask Splunk Support to make changes which would need access to the files directly.
Most applictions and TA's can be deployed to both platforms, but there are some specialist applications which can not be deployed to Splunk cloud.
To collect data from PA, you install a heavy forwarder on site and install the PA-TA onto your heavy forwarder where you have full contol. Your HF then sends your log data to either Splunk Enterprise (on Prem) or Splunk Cloud.
Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!
Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.
Automating Threat Operations and Threat Hunting with Recorded Future
Keep the Learning Going with the New Best of .conf Hub
Splunk Community Badges!
