This repository was archived by the owner on Dec 14, 2024. It is now read-only.
SourceType Confusion #321
Description
Documentation link
https://pan.dev/splunk/docs/universal-forwarder/
Describe the problem
In the firewall setup documentation it states to set the input for post 6.1 devices to pan:firewall
However in the splunk syslog-ng / universal-fowarder documentation it doesn't make any distinction and states the source type as pan:log
Suggested fix
Documentation should clarify whether this to should change for post 6.1 or should be set to the same pan:log for either