×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
TRBVBQ
Explorer
Member since: ‎03-23-2018
‎06-05-2020
Community Statistics
Posts 6
Solutions 0
Karma Given 0
Karma Received 1
Member Since ‎03-23-2018
Activity Feed
View All

Re: Why am I not getting any data on Palo Alto Net...

by in All Apps and Add-ons
‎03-26-2018 12:36 AM
‎03-26-2018 12:36 AM
And what's displayed is "waiting for entries" ... View more

Re: Why am I not getting any data on Palo Alto Net...

by in All Apps and Add-ons
‎03-26-2018 12:36 AM
‎03-26-2018 12:36 AM
Firewall Event, Latest event code is this one: | pan_tstats count FROM node(log.system) $serial_number$ $vsys$ $description$ $log_subtype$ $severity$ $event_id$ table(_time log.serial_number log.description log.log_subtype log.severity log.event_id) | sort -_time ... View more

Re: Why am I not getting any data on Palo Alto Net...

by in All Apps and Add-ons
‎03-26-2018 12:34 AM
‎03-26-2018 12:34 AM
Hello On the "Real Time event feed", I have only the "Event type" graph that is filled. On some dashboards, I have this warning " KVStore based automatic lookups are not supported (pan:threat)" ... View more

Re: Why am I not getting any data on Palo Alto Net...

by in All Apps and Add-ons
‎03-23-2018 07:58 AM
‎03-23-2018 07:58 AM
Yes, I have some working dashboards, but only for others App, like network ones. The Add one is 6.0.2, but I think I don't need this Add On, I have configured nothing on it. Thanks ! ... View more

Why am I not getting any data on Palo Alto Network...

by in All Apps and Add-ons
‎03-23-2018 03:21 AM
1 Karma
‎03-23-2018 03:21 AM
1 Karma
Hello Splunk Version 6.2.1 Palo Alto Networks APP 6.0.1 The index seems to be correctly configured because I receive data if I search "eventtype=pan" or "index="pan_logs" on the App itself. But I have no data at all under Activity, Threats or Operations tab... I followed the troubleshooting steps available but found nothing, only something about NTP and time settings, but that's not clear that the NTP problem makes the data not to appear at all. And the timestamp of logs seems correct: What else can I check? This is my first configs on Splunk and I may have missed something. Thanks for the help! ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎06-05-2020 02:04 AM
Karma from
View All