All Apps and Add-ons

Why is Splunk for Palo Alto Networks app not displaying traffic dashboard?

rodgerkrau
New Member

Every dashboard working but Traffic dashboard.."Search is waiting for input..." Splunk 6.1 and PA app 4.1.1

0 Karma

btorresgil
Builder

Hello,

All the dashboards work off the same datamodel, so if one dashboard is showing data but the others aren't, it's probably because the firewall isn't sending the other kinds of syslogs (like threat, config, system, etc). You can use the troubleshooting guide to try and send config logs and see if they show up in the config dashboard:

Splunk for Palo Alto Networks App - Troubleshooting guide:
https://live.paloaltonetworks.com/docs/DOC-6593

0 Karma

rodgerkrau
New Member

confirmed all in the troubleshooting guide is correct.. however, I get data with this search, index=pan_logs but not this one: index=pan_logs sourcetype=config

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...