All Apps and Add-ons

Received event for unconfigured/disabled/deleted

Finisar
New Member

I have configured the above settings as described, I see the below msg. Are there are any more settings that needs to be done to capture the events.

received event for unconfigured/disabled/deleted index='pan_log' with source='source::udp:514' host='host::xx.xx.xx.xx' sourcetype='sourcetype::pan_threat' (1 missing total)

0 Karma

Finisar
New Member

Ya, thanks a lot for correcting me.

0 Karma

monzy
Communicator

Your error is probably due to a typo in your inputs.conf file. The Palo alto apps index is pan_logs and not the singular pan_log. Please edit your inputs.conf.

Cheers,

Monzy

0 Karma
Get Updates on the Splunk Community!

Archived Metrics Now Available for APAC and EMEA realms

We’re excited to announce the launch of Archived Metrics in Splunk Infrastructure Monitoring for our customers ...

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Dashboard Challenge and Watch the .conf24 Global Broadcast!

The Splunk Community Dashboard Challenge is still happening, and it's not too late to enter for the week of ...