Dashboards & Visualizations

Dashboard is not populating

chrisdalhoe
New Member

My App: Palo Alto Networks is not populating any data. I am able to do searches on my index="pan_logs" and also the host="x.x.x.x".

Any ideas where I can start troubleshooting? Any help is appreciated. Thanks!

Tags (1)
0 Karma

btorresgil
Builder

First, I recommend upgrading to the latest version of the App (v5.0.x) which no longer uses the pan_logs index. Then, use the getting started guide to get set up, and the troubleshooting guide to figure out what is wrong:

Getting Started:
http://pansplunk.readthedocs.org/en/latest/getting_started.html

Troubleshooting:
http://pansplunk.readthedocs.org/en/latest/troubleshoot.html

Let us know if you're still having trouble after going through the guide.

jkat54
SplunkTrust
SplunkTrust

Start with the job inspector. See if the dashboard searches are failing and if so for what reason. Check index=_internal for ERROR or WARN.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...