I am wondering why Deployment Server is full and the only stored in this server is Deployment Server Ta’s and .Conf to distribute the TA’s and Conf to Universal Forwarders. this is the Specs. Deployment Server - 16 CPU Core (or 32 vCPU – if VM then must be dedicated), 2 GHz+ per core or greater - 16GB RAM - 1 x 200GB storage space (for OS and Splunk) - 64-bits OS Linux/Windows - 10GB Ethernet NIC, with optional 2nd NIC for management network   but the disk Space is full in /root   Please help Thank you ... View more

Hi Splunkers,   i already done configuration of HF and install uf credentials. but i can't see the logs of palo alto in Splunk Cloud    for HF   Inputs.conf [udp://5000] index = xxxxx_pan disabled = false sourcetype = pan_log   but HF and Splunk Cloud instance have communicating.    please help me  ... View more