Quantcast
Channel: Q&A related to Splunk for Palo Alto Networks
Viewing all articles
Browse latest Browse all 121

Splunk for Palo Alto Networks Threat

$
0
0

I have a fresh install of the App and I am recieving most of the data. However, when I go to the Threat section and try to load the dashboards it gives me the "No results found. Inspect..." message. After clicking I can see that the search isn't completing because it's either looking for the keyword "None" or isn't getting the right data from the transformer.conf or the props.conf. Here is one of the example searches:

None | tstats count(log_subtype) AS cls FROM pan_threat where * groupby _time log_subtype span=5m | timechart values(cls) by log_subtype

Can anyone point me to the right direction?


Viewing all articles
Browse latest Browse all 121

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>