Good afternoon!
I have Palo Alto generating logs and redirecting them to Splunk, I am wanting to use Palo Alto Networks but I can't get it to work correctly, due to the configurations followed, the only thing I just got is that it shows me the logs by Realtime Event Feed, but I I would like to understand and understand how Splunk and this Add from Palo Alto work, how to configure it, how to manage it since I cannot find a documentation that explains it very well, one of the things I would like to do is that the information of Palo Alto also appear in GlobalProtect etc, but I would like to understand how it works and how to redirect the information to the GlobalProtect window or well, understand concepts, thank you very much in advance!
