All Apps and Add-ons

Is there an easier way of viewing evidence from correlation events in the Palo Alto Networks App for Splunk?

csd126
Engager

The 'Network Security' dashboard includes the Top Correlation Events. Is there an easy way within the Palo Alto Networks App to view the corresponding "evidence", similar to what Panorama shows?

panguy
Contributor

Your welcome to create a custom panel. We have a macro set up to get all correlated logs.

`pan_correlation`
0 Karma

splandrew
Engager

I know this is an old thread but any chance you could post the logic of your macro? 

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to July Tech Talks, Office Hours, and Webinars!

What are Community Office Hours?Community Office Hours is an interactive 60-minute Zoom series where ...

Updated Data Type Articles, Anniversary Celebrations, and More on Splunk Lantern

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

A Prelude to .conf25: Your Guide to Splunk University

Heading to Boston this September for .conf25? Get a jumpstart by arriving a few days early for Splunk ...