I still have problem using solarwinds orion with palo alto, I can see limited information.
can't drill down to top conversation which show me: Data is not available.
I also use this article and added all the choices:
thank you for the help.
Are you sending you netflow data from the PAN to SolarWinds? Is it getting sourced from your management interface are there any drops or denies listed in the logs?
Yes I'm trying to send netflow data to solarwinds orion.
I'm using Default service route configuration, when I change the default route or revert beack to default setting it suddly work for few minutes and stop again.
On logs I don't see traffic from palo alto to solarwinds IP I guess because it's using mgmt interface.
Hmm, sounds like it could be on the SW side of this. If you open a case with them they will want to see pcaps from the server verifying you are getting the flow from the PAN.
What protocol and port si the PAN using to send the netflow? By default, SW uses udp port 2055.
Check out the link and see if the flow is making it to the SW server.
SW is receiving the traffic from palo alto but is limited, I can’t drill down in the information.
I see 1-2 levels of information, when I want to get more details on the traffic and endpoints it show me the error.
Also just to verify you have the proper SW licensing? the netflow piece is not part of the base package. If the answer is yes, i would suggest you contact their support.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!
The Live Community thanks you for your participation!