Retrieve logs from Splunk

Gonzaa123 — Tue, 11 Jul 2023 07:58:10 GMT

Hello team,

I´ve just started with expedition and I´m working on trying to get logs from Splunk. Whenever I run a query i´m getting the following errors in the task manager log and the file/info is never retrieved.

I´m on version 1.2.64 BP3.33.0

Tue, 11 Jul 2023 09:51:27 +0200 Start Task
Action: Request
Traffic Log from Splunk:
Target: XXXXXXXXX
Date: 2023-07-09

Notice: Trying to get property of non-object in /var/www/html/console/messaging/classes/PaloAltoNetworks/Processes/Devices/Splunk/RetrieveFromSplunk.php on line 323

Notice: Trying to get property of non-object in /var/www/html/console/messaging/classes/PaloAltoNetworks/Processes/Devices/Splunk/RetrieveFromSplunk.php on line 324

Notice: Trying to get property of non-object in /var/www/html/console/messaging/classes/PaloAltoNetworks/Processes/Devices/Splunk/RetrieveFromSplunk.php on line 325

Notice: Trying to get property of non-object in /var/www/html/console/messaging/classes/PaloAltoNetworks/Processes/Devices/Splunk/RetrieveFromSplunk.php on line 326

Notice: Trying to get property of non-object in /var/www/html/console/messaging/classes/PaloAltoNetworks/Processes/Devices/Splunk/RetrieveFromSplunk.php on line 327

Notice: Trying to get property of non-object in /var/www/html/console/messaging/classes/PaloAltoNetworks/Processes/Devices/Splunk/RetrieveFromSplunk.php on line 328

Notice: Trying to get property of non-object in /var/www/html/console/messaging/classes/PaloAltoNetworks/Processes/Devices/Splunk/RetrieveFromSplunk.php on line 329

Notice: Trying to get property of non-object in /var/www/html/console/messaging/classes/PaloAltoNetworks/Processes/Devices/Splunk/RetrieveFromSplunk.php on line 333
The xml:

Tue, 11 Jul 2023 09:51:27 +0200 End Task

Thank you.

Re: Retrieve logs from Splunk

dpuigdomenec — Tue, 11 Jul 2023 09:11:23 GMT

Hi @Gonzaa123

Thanks for reaching out.

Please could you send an email to fwmigrate@paloaltonetworks.com including an screenshoot of the window where you prepare the splunk queries and execute them?

Please make sure that the screenshot contains all the "list of requested traffic logs".

Thanks in advance,

David

Re: Retrieve logs from Splunk

Gonzaa123 — Tue, 11 Jul 2023 09:27:33 GMT

Hi @dpuigdomenec

Info sent.

Thanks in advance for the help.

topic Re: Retrieve logs from Splunk in Expedition Discussions

Retrieve logs from Splunk

Re: Retrieve logs from Splunk

Re: Retrieve logs from Splunk