icon/x Created with Sketch.

Splunk Cookie Policy

We use our own and third-party cookies to provide you with a great online experience. We also use these cookies to improve our products and services, support our marketing campaigns, and advertise to you on our website and other websites. Some cookies may continue to collect information after you have left our website. Learn more (including how to update your settings) here.
Accept Cookie Policy

Accept License Agreements

This app is provided by a third party and your right to use the app is in accordance with the license provided by that third-party licensor. Splunk is not responsible for any third-party apps and does not provide any warranty or support. If you have any questions, complaints or claims with respect to this app, please contact the licensor directly.

Thank You

Downloading Palo Alto Networks App for Splunk
SHA256 checksum (palo-alto-networks-app-for-splunk_702.tgz) d5a06537013c24a084e738c7f25121c424535fc1b5163cd23d371f014b080037 SHA256 checksum (palo-alto-networks-app-for-splunk_701.tgz) 106219035fe22f31d1373de9ee4200fe1f30293a742d6f912900c0ebb73f9408 SHA256 checksum (palo-alto-networks-app-for-splunk_662.tgz) 4b8731cd77ec30af1732dc8c67dbc379e8dcd6c295f39dbf9d270d7b0f3578bb SHA256 checksum (palo-alto-networks-app-for-splunk_700.tgz) 54437b15742f12ff72317d2615f489e6ba143d297e1e54e3cfed3ab5887fb7c4 SHA256 checksum (palo-alto-networks-app-for-splunk_661.tgz) 6ca479c6c543e53f24ebe1eb2793807896e807f9eaefe90b15262682e378fb46 SHA256 checksum (palo-alto-networks-app-for-splunk_660.tgz) 601f1cbe1b3120b32030f5bdae22a741ea94df22bd2a9dd067470f9bf59713c2 SHA256 checksum (palo-alto-networks-app-for-splunk_652.tgz) ddb4f3e8b26ef7ad7a86fe38db42d7232ef20498edce382f192573860253fee3 SHA256 checksum (palo-alto-networks-app-for-splunk_651.tgz) ce6e0bd48c2948728f7b6ddb4c6146889722237c47e3f30d52cbefd98d76a937 SHA256 checksum (palo-alto-networks-app-for-splunk_660beta1.tgz) 51c4191bb442e15b7cb3dcd432f2c334782967a5dac3d48663bbb9a7732bc06f SHA256 checksum (palo-alto-networks-app-for-splunk_650.tgz) c6739d8826068865879647305daefdaddedd6129b4a994c09adc51d1964b90f8 SHA256 checksum (palo-alto-networks-app-for-splunk_640.tgz) 22de032813f118cc154877bbdf9ff2833bd44ab116418699c0f39f3fa10e803a SHA256 checksum (palo-alto-networks-app-for-splunk_631.tgz) 4cefa2165e900658d4d08d18af540cc8c584f63faf7cf393f558fd7d4205449d SHA256 checksum (palo-alto-networks-app-for-splunk_630.tgz) ff763400f975621fc9a64705987543d8fe6592d0db94802bd456b5b0e006bafd SHA256 checksum (palo-alto-networks-app-for-splunk_620.tgz) 252708d474dacb868b867051523e7fdb5a3ab633014b5672ce3ae1e9ee65864f SHA256 checksum (palo-alto-networks-app-for-splunk_611.tgz) c576fbe196aea404b3750548949ac86e9dea7add94077ac3cce60a0cca74e068 SHA256 checksum (palo-alto-networks-app-for-splunk_610.tgz) 6994018f89a3d50d0cbbd71d61873e1bdcff7f93c9fb9cf93cdfeddfc3afcf1b SHA256 checksum (palo-alto-networks-app-for-splunk_610b1.tgz) 1a5ba75d85413cb59ad3b2bd4092aa43d0e9f88a4bca022cb9c61f8ea4ca6369 SHA256 checksum (palo-alto-networks-app-for-splunk_601.tgz) 561894538ab6a54b2592e6c98663c07454af77662efc71e9fda56e4a9644317a
To install your download
For instructions specific to your download, click the Details tab after closing this window.

Flag As Inappropriate

Palo Alto Networks App for Splunk

Splunk Cloud
Overview
Details
Palo Alto Networks and Splunk have partnered to deliver an advanced security reporting and analysis tool. The collaboration delivers operational reporting, configurable dashboard views, and adaptive response across Palo Alto Networks family of next-generation firewalls, advanced endpoint security, and threat intelligence cloud.

Palo Alto Networks App for Splunk leverages the data visibility provided by the Palo Alto Networks security platform with Splunk's extensive investigation and visualization capabilities to deliver advanced security reporting and analysis. This app enables security analysts, administrators, and architects to correlate application and user activities across all network and security infrastructures from a real-time and historical perspective. Complicated incident analysis that previously consumed days of manual and error-prone data mining can now be automated, saving not only manpower but also enabling key enterprise security resources to focus on critical, time-sensitive investigations.

Overview

- Partnership Overview (video)

Requirements

Installation

Support

Release Notes

Authors

Palo Alto Networks

  • Brian Torres-Gil
  • Paul Nguyen
  • Garfield Freeman

Release Notes

Version 7.0.2
Sept. 11, 2021
Version 7.0.1
May 26, 2021
Version 6.6.2
May 26, 2021
Version 7.0.0
May 14, 2021
Version 6.6.1
May 8, 2021
Version 6.6.0
April 1, 2021
Version 6.5.2
March 31, 2021
Version 6.5.1
March 14, 2021
Version 6.6.0beta1
Jan. 12, 2021
Version 6.5.0
Oct. 30, 2020

Features

  • app/addon: Tag to Dynamic User Group
  • app/addon: Update pandevice to 0.14.0

Bug Fixes

  • addon: Remove the 'state_change_requires_restart' flag
Version 6.4.0
Sept. 21, 2020

Features

  • addon: Decryption Log Support

Bug Fixes

  • addon: Fix Remove port from dest_name field
Version 6.3.1
Aug. 11, 2020

Bug Fixes

  • addon: Fix parser for GlobalProtect 9.1 log sourcetype
Version 6.3.0
Aug. 7, 2020

Features

- app/addon: Python 3 Support
- app/addon: Support GlobalProtect log type in PANOS 9.1

Bug Fixes

- addon: Fix appserver/static files
Version 6.2.0
Feb. 25, 2020

v6.2.0
- New: Palo Alto Networks Logo
- Fix: Retired "NewApp" API call to Applipedia

v6.1.1
- New: Dark mode supported
- Fix: Endpoint dashboard and datamodel

v6.1.0
- New: Support for Traps 5.0 (Traps Management Service)
- New: User ID updates can now be added with a timeout setting
- Enh: Real-time dashboard now uses only a single base search
- Fix: User ID updates work consistently via Panorama
- Fix: Issue with Block-Continue panel in Web Activity report

Version 6.1.1
Feb. 20, 2019

v6.1.1
- New: Dark mode supported
- Fix: Endpoint dashboard and datamodel

v6.1.0
- New: Support for Traps 5.0 (Traps Management Service)
- New: User ID updates can now be added with a timeout setting
- Enh: Real-time dashboard now uses only a single base search
- Fix: User ID updates work consistently via Panorama
- Fix: Issue with Block-Continue panel in Web Activity report

Version 6.1.0
Oct. 26, 2018
  • New: Support for Traps 5.0 (Traps Management Service)
  • New: User ID updates can now be added with a timeout setting
  • Enh: Real-time dashboard now uses only a single base search
  • Fix: User ID updates work consistently via Panorama
  • Fix: Issue with Block-Continue panel in Web Activity report
Version 6.1.0b1
Oct. 18, 2018
Version 6.0.1
Nov. 22, 2017

v6.0.1
Improved filtering on dashboards
Improved debugging logs

v6.0.0
* All new dashboards
- Adversary Scoreboard
- All Incident Feed
- Real-time Event Feed
- Datamodel Audit
- User Behavior
- And many more new dashboards...
* Tool tips and Tour to help guide you through the new dashboards
* Events from Firewall, Panorama, Traps, Aperture, AutoFocus, and Minemeld correlate and combine to offer unparalleled security insights
* Support for content pack sync with PAN-OS 8.0

6,813
Installs
66,125
Downloads
Share Subscribe LOGIN TO DOWNLOAD

Subscribe Share

Are you a developer?

As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps and add-ons from Splunk, our partners and our community. Find an app or add-on for most any data source and user need, or simply create your own with help from our developer portal.

Follow Us:
Splunk, Splunk>,Turn Data Into Doing, Data-to-Everything, and D2E are trademarks or registered trademarks of Splunk Inc. in the United States and other countries. All other brand names,product names,or trademarks belong to their respective owners.