×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
BasicCrow
Engager
Member since: ‎01-29-2025
‎01-29-2025
Community Statistics
Posts 2
Solutions 0
Karma Given 1
Karma Received 0
Member Since ‎01-29-2025
View All

Re: Sending Palo Alto logs to Splunk without the S...

by in Getting Data In
‎01-29-2025 09:16 AM
‎01-29-2025 09:16 AM
Unfortunately, the environment we have forces us to run things a little messy. We don't have a box to use as a syslog server, and as such must run as root. Also, the download restriction is more on logging in than what is being downloaded. We are not allowed to log in to anything other than the devices in the environment. Do you know of any documentation on good props.conf settings to use? ... View more

Sending Palo Alto logs to Splunk without the Splun...

by in Getting Data In
‎01-29-2025 08:37 AM
‎01-29-2025 08:37 AM
Hello, I have a Palo Alto Firewall in my environment and would like to set it up to forward logs to a Splunk indexer which is also the syslog server. The environment is small and we are not allowed to log in to anything to download software, so using the App or Add-on isn't possible. Is there a way to directly send my Palo logs to the Splunk indexer? ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
‎01-29-2025 02:24 PM
Karma given to
View All