Splunk Cloud Platform

Help with splunk Cloud with palo alto firewall configuration

raje1
Engager

Hi,

I have installed a app of palo alto firewall in my splunk cloud. an someone please help me how an i connect splunk and palo alto firewall with each other. what are the steps. I am confused.
which permission do i need to do this configuration.
In splunk cloud documentation, a lots of material is for the splunk enterprise not for splunk cloud.

thanks!

Labels (1)
Tags (2)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Palo Alto can't send directly to Splunk Cloud. Direct your PAN logs to a Splunk forwarder (perhaps on a syslog server) that sends the data to Splunk Cloud.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Palo Alto can't send directly to Splunk Cloud. Direct your PAN logs to a Splunk forwarder (perhaps on a syslog server) that sends the data to Splunk Cloud.

---
If this reply helps you, Karma would be appreciated.
0 Karma

raje1
Engager

Can you give me instructions how to direct PAN logs to splunk forwarder. I am new in splunk.

0 Karma

dkroen17
Engager

Check Panorama documentation and create a syslog destination.  You'll need a distinct syslog server.  Use Rsyslog or syslog-NG.  Install a universal forwarder on the same machine that forwards the collected panorama logs to your Splunk syslog installation.  Good Luck!

0 Karma

richgalloway
SplunkTrust
SplunkTrust

That's not a Splunk question. Consult the instructions for your PAN device to learn how to direct the logs to an external location.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Prove Your Splunk Prowess at .conf25—No Prereqs Required!

Your Next Big Security Credential: No Prerequisites Needed We know you’ve got the skills, and now, earning the ...

Splunk Observability Cloud's AI Assistant in Action Series: Observability as Code

This is the sixth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Splunk Answers Content Calendar, July Edition I

Hello Community! Welcome to another month of Community Content Calendar series! For the month of July, we will ...