- Apps and Add-ons
- :
- All Apps and Add-ons
- :
- Re: Global Protect Logs are not showing
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Once PaloAlto firewall was upgraded to Version 9.1.6 , Our PaloAlto App Version 6.2.0 stopped showing the Global Protect logs . I Upgraded the Palo Alto Networks Add-on for Splunk and Palo Alto Networks App for Splunk to 6.5.0 . I installed the App+Add-on on Search Heads whereas I installed the Add-on on Indexers and Heavy Forwarders . All the dashboards under Operations are Working but The dashboard for GlobalProtect (PANOS >= 9.1) is not working at all .
The App documentation does not mention on what changes were done for Global protect logs and what to do if you are unable to see it .
Please note that data model pan_firewall is fully build and has data . All other data models are disable as we do not have those products .
Any Ideas .
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Update
======
Earlier I had upgraded from 6.2.0 to 6.5.1 and then rolled back to 6.5.0 . I guess that caused some Problem . So I uninstalled the App and Add on from the Server . Installed them again from Scratch and Populated the data model from scratch . Now it is is showing perfectly .
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Update
======
Earlier I had upgraded from 6.2.0 to 6.5.1 and then rolled back to 6.5.0 . I guess that caused some Problem . So I uninstalled the App and Add on from the Server . Installed them again from Scratch and Populated the data model from scratch . Now it is is showing perfectly .
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
That add-on is supported by the developer. Contact them at splunkapp@paloaltonetworks.com
If this reply helps you, Karma would be appreciated.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
This is a good suggestion and I was thinking about it . But I thought to try it here first .
Enter the Splunk Community Dashboard Challenge for Your Chance to Win!
.conf24 | Session Scheduler is Live!!
Introducing the Splunk Community Dashboard Challenge!
