I can see data being collected from my Palo Alto Devices (4 of them), but when I switch over to the Palo Alto App there is no data. Tried adding this into 2 locations:
connection_host = IP Address sourcetype = pan_log no_appending_timestamp = true
under the file "inputs.conf" (located at SplunkforPaloAltoNetworkslocal and Splunketcsystemlocal and Splunketcsystemdefault) with no results.
Anyone know the answer?