topic input logs firawall in General Topics

input logs firawall

axelfa — Tue, 20 Feb 2024 08:11:24 GMT

Hi, is it possible to add information imported from another event log to the logs of a Palo Alto firewall?

Re: input logs firawall

kiwi — Tue, 20 Feb 2024 09:33:39 GMT

A common use of Splunk is to correlate different kinds of logs together. In fact, Palo Alto Networks Next-generation Firewall logs often need to be correlated together. Check out the following developer doc that discusses the topic of log-correlation:

https://pan.dev/splunk/docs/log-correlation/

Kind regards,

-Kim.

Re: input logs firawall

axelfa — Tue, 20 Feb 2024 10:26:52 GMT

I'm not looking to correlate palo logs but to correlate external logs to traffic logs

thanks you for your help