×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Ask a Question
zfarling
Engager
Member since: ‎03-14-2013
‎02-19-2025
Community Statistics
Posts 3
Solutions 0
Karma Given 1
Karma Received 0
Member Since ‎03-14-2013
Activity Feed
View All

Re: Palo Alto data not showing up

by in All Apps and Add-ons
‎08-12-2013 05:05 AM
‎08-12-2013 05:05 AM
I did like you said and did a search for pan_traffic and nothing showed up. The version of the Palo Alto app that I am showing under Apps is 3.3.1. On the Pan I am using the default settings for the syslogs and I have it set to send everything to Splunk. ... View more

Re: Palo Alto data not showing up

by in All Apps and Add-ons
‎08-09-2013 11:45 AM
‎08-09-2013 11:45 AM
Thank you that worked I can see the data in the search. Now when I go to look at the traffic logs it is giving me "no matching events found. inspect..." the inspect file shows index=pan_logs sourcetype="pan_traffic" I did a search for pan_traffic, pan_threat, pan_system, pan_config and nothing will show up. ... View more

Palo Alto data not showing up

by in All Apps and Add-ons
‎08-09-2013 10:42 AM
‎08-09-2013 10:42 AM
Running Splunk on RHEL x64 with the latest version of the Palo Alto app. On the over view screen I can see 1 pan reporting and events showing up nothing in the block-url and N/A on the top category everything else is blank. When i do a search for index I only get "pan_logs" and the only source type is "pan_log" My inputs.conf is as follows: [udp://512] index= pan_logs connection_host= ip sourcetype= pan_log #no_appending_timestamp = true If i do no_appending_timestamp = true nothing will show up on the overview paged everything is 0. My macros.conf hasn't been changed Any help would be nice. ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎02-19-2025 08:25 PM
Karma given to
View All