https://live.paloaltonetworks.com/t5/aiops-for-ngfw-discussions/can-you-help-me-understand-this-alert/m-p/533849#M346 <P>"one additional location" can be Syslog for example.</P> <P>You set it up inside log forwarding profile "Objects &gt; Log Forwarding"</P> Thu, 09 Mar 2023 21:20:06 GMT Raido_Rattameister 2023-03-09T21:20:06Z https://live.paloaltonetworks.com/t5/aiops-for-ngfw-discussions/can-you-help-me-understand-this-alert/m-p/533846#M345 <P><SPAN>"It is recommended to forward all threat logs to Panorama and at least one additional location."</SPAN></P> <P>&nbsp;</P> <P><SPAN>So many places to set this up, I'm not exactly sure what it means/wants?</SPAN></P> Thu, 09 Mar 2023 21:08:06 GMT https://live.paloaltonetworks.com/t5/aiops-for-ngfw-discussions/can-you-help-me-understand-this-alert/m-p/533846#M345 RobertShawver 2023-03-09T21:08:06Z https://live.paloaltonetworks.com/t5/aiops-for-ngfw-discussions/can-you-help-me-understand-this-alert/m-p/533849#M346 <P>"one additional location" can be Syslog for example.</P> <P>You set it up inside log forwarding profile "Objects &gt; Log Forwarding"</P> Thu, 09 Mar 2023 21:20:06 GMT https://live.paloaltonetworks.com/t5/aiops-for-ngfw-discussions/can-you-help-me-understand-this-alert/m-p/533849#M346 Raido_Rattameister 2023-03-09T21:20:06Z