input logs firawall

[axelfa]

Hi, is it possible to add information imported from another event log to the logs of a Palo Alto firewall?

[kiwi]

Hi @axelfa ,

A common use of Splunk is to correlate different kinds of logs together. In fact, Palo Alto Networks Next-generation Firewall logs often need to be correlated together.  Check out the following developer doc that discusses the topic of log-correlation:

https://pan.dev/splunk/docs/log-correlation/

Kind regards,

-Kim.

[axelfa]

I'm not looking to correlate palo logs but to correlate external logs to traffic logs

thanks you for your help