All Apps and Add-ons

PANTAG error

ray_lau
Explorer

Hi Support, Community,

i am testing the PANTAG searchbar command but got the following error , How can i solve this? thank you.

5/25/17 8:01:53.469 PM

2017-05-25 20:01:53,469 +0800 ERROR common:199 - File "/opt/splunk/etc/apps/SplunkforPaloAltoNetworks/bin/panTag.py", line 249, in
main_splunk()
File "/opt/splunk/etc/apps/SplunkforPaloAltoNetworks/bin/panTag.py", line 155, in main_splunk
apikey = common.apikey(sessionKey, hostname, debug)
File "/opt/splunk/etc/apps/SplunkforPaloAltoNetworks/bin/lib/common.py", line 183, in apikey
exit_with_error("Unable to get apikey from firewall: %s" % str(e))
File "/opt/splunk/etc/apps/SplunkforPaloAltoNetworks/bin/lib/common.py", line 199, in exit_with_error
logger.error(''.join(traceback.format_stack()))

0 Karma
1 Solution

ray_lau
Explorer

i have hardcode the APIkey got from the PA firewall in the file "/opt/splunk/etc/apps/SplunkforPaloAltoNetworks/bin/lib/common.py"

apikey = "API key from PA firewall"

How to get the APIkey from PA firewall
https://www.paloaltonetworks.com/documentation/71/pan-os/xml-api/get-started-with-the-pan-os-xml-api...

View solution in original post

ray_lau
Explorer

i have hardcode the APIkey got from the PA firewall in the file "/opt/splunk/etc/apps/SplunkforPaloAltoNetworks/bin/lib/common.py"

apikey = "API key from PA firewall"

How to get the APIkey from PA firewall
https://www.paloaltonetworks.com/documentation/71/pan-os/xml-api/get-started-with-the-pan-os-xml-api...

ray_lau
Explorer

it seems the APIkey have problem to get from Splunk and i have successful to use the pantag command by hardcode the apikey in the common.py

0 Karma

adonio
Ultra Champion

if you solved it, kindly post an answer describing which steps you took to solve and mark as answered
cheers

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...