Getting Data In

SourceType 'pan_log' not listed when adding new DataInput for PaloAlto

gooon26
New Member

Hi

When i try to configure a new UDP data input in my splunk to work with PaloAlto it only list these source types

Access_combined
apache_error
csv
iis
log4j
log4php
syslog

How can i install the sourcetype 'pan_log'

Best regard

Gonzalo

0 Karma

radam2000
Path Finder

Actually i believe you need to install the paloalto add-on instead of the app

Splunk_TA_paloalto

Now at version 6.1.1 i believe

0 Karma

rgaleone1
Path Finder

Have you installed the Palo Alto App?

0 Karma

matthieulopez
Engager

same problem
do you find an issue?

0 Karma
Get Updates on the Splunk Community!

Introducing Splunk Enterprise 9.2

WATCH HERE! Watch this Tech Talk to learn about the latest features and enhancements shipped in the new Splunk ...

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...

Routing logs with Splunk OTel Collector for Kubernetes

The Splunk Distribution of the OpenTelemetry (OTel) Collector is a product that provides a way to ingest ...