Issues

Steps to deploy Palo Alto addon via Splunk Deployer server to a search head cluster
PaloAltoNetworks/Splunk-Apps#335 · opened on Sep 9, 2024
Authentication process and credential encryption issues
PaloAltoNetworks/Splunk-Apps#334 · opened on Jul 18, 2024
1
Duplicate field names in extraction for pan:globalprotect
PaloAltoNetworks/Splunk-Apps#328 · opened on Apr 30, 2024
PA firewall logs ingested in Splunk Cloud without field extractions
PaloAltoNetworks/Splunk-Apps#325 · opened on Mar 21, 2024
2
[Bug] Cortex Data > Splunk HEC event line breaks missing
PaloAltoNetworks/Splunk-Apps#324 · opened on Feb 28, 2024
3
Logs have only sourcetype of pan:log
PaloAltoNetworks/Splunk-Apps#323 · opened on Feb 9, 2024
1
Base Search in network_security.xml does not contain vendor_action so sink holing subsearch fails
PaloAltoNetworks/Splunk-Apps#322 · opened on Jan 30, 2024
SourceType Confusion
PaloAltoNetworks/Splunk-Apps#321 · opened on Jan 26, 2024
PAN-OS Authentication Log Field Extractions
PaloAltoNetworks/Splunk-Apps#320 · opened on Jan 19, 2024
IoT Security Input 'Interval' Not Used To Influence 'stime' All Data All The Time
PaloAltoNetworks/Splunk-Apps#318 · opened on Jan 5, 2024
1
Not getting data from Cortex
PaloAltoNetworks/Splunk-Apps#317 · opened on Nov 21, 2023
Logs not being properly parsed when shipped from Panorama to Splunk
PaloAltoNetworks/Splunk-Apps#305 · opened on Aug 29, 2023
8
pan:config in default is broken
PaloAltoNetworks/Splunk-Apps#302 · opened on Jul 18, 2023
field offset wrong at src_user and source_name in transforms.conf
PaloAltoNetworks/Splunk-Apps#301 · opened on Jul 17, 2023 · Next Bug Fix Release
2
App is not parsing the URI to create interesting fields
PaloAltoNetworks/Splunk-Apps#298 · opened on Jun 5, 2023
1
Incorrect Field Mapping - PAN Threat - User Field (mapped with http category - Sender)
PaloAltoNetworks/Splunk-Apps#297 · opened on May 25, 2023
3
Issues getting sourcetype=pan:* to produce data in query.
PaloAltoNetworks/Splunk-Apps#293 · opened on May 1, 2023
7
Field alias inconsistencies between firewall and firewall_cloud
PaloAltoNetworks/Splunk-Apps#289 · opened on Mar 9, 2023
2
CIM datamodel mapping for DHCP missing
PaloAltoNetworks/Splunk-Apps#283 · opened on Jan 30, 2023
1
dvc field is determined inconsistently across sourcetypes
PaloAltoNetworks/Splunk-Apps#272 · opened on Nov 7, 2022
Cortex XDR API data field time extraction
PaloAltoNetworks/Splunk-Apps#271 · opened on Nov 4, 2022
1
Traffic and Threat Log doens't correctly translate the Source IP / X-Forwarded-For Value
PaloAltoNetworks/Splunk-Apps#253 · opened on Apr 19, 2022
3
Time read by Splunk is missleading
PaloAltoNetworks/Splunk-Apps#244 · opened on Mar 14, 2022
2
User Field Calc Misconfiguration Pan:Threat
PaloAltoNetworks/Splunk-Apps#243 · opened on Mar 11, 2022
1
pantag timeout feature request
PaloAltoNetworks/Splunk-Apps#239 · opened on Feb 17, 2022
1