btorresgil/docker-splunk-panw-demo

A demo of the Palo Alto Networks Splunk Applications

docker-splunk-panw-demo's Issues

How can I keep sample log data input running?

Hello,

I have installed "docker-splunk-panw-demo" on Ubuntu successfully. However, I can see log data input once when I run "./start.sh".

I login to docker "docker exec -it splunk-demo /bin/bash" and check "eventgen.conf" in /opt/splunk/etc/apps/SA-Eventgen/default folder. I can see "interval = 60" setting.

Should the sample log data ingest every 60 sec? I cannot see more log data/events showing, index=main.

1. How can I keep sample log data input running? Is there a instruction?
2. How can I have more sample demo log data/events? Many dashboard panels show "No results found".

I am new to "SA-Eventgen". We have a production Palo Alto App is running. I am comparing this demo with it. I am preparing to share this demo to my teams.

Please help me.

Thanks.

logs for : pan_minemeld_indicators.json autofocus_tags_for_kvstore.json not generated on the docker image

How to Connect to Splunk/PANW container

Hi,

I appreciate this is best efforts support offered with the PANW/Splunk docker image.

I'm new to both docker and Ubuntu - but any help appreciated.

I have the container running from a command line in Ubuntu, but could you advise how I should connect to it via a browser? I should be able to do this from my Ubuntu desktop, right? But what address should I use?

Thanks for any help, which would be much appreciated.

Kind regards,

Andy

Error in Dockerfile

FYI, line 33 of Dockerfile currently has:

RUN rm -f /pan_datagen.tar.gz

It should be:

RUN rm -f /eventgen.tar.gz

WebUI is asking for credentials

After removing my old instance and doing a new install of the newest version I’m prompted for credentials when trying to access the WebUI on port 8000.

Any help is appreciated.