https://live.paloaltonetworks.com/t5/vm-series-in-the-public-cloud/vm-300-syslog-to-azure-sentinel/m-p/464881#M1455 <P>Hi. May I know if you still face this issue? I also have similar issue with this. Any reponse from TAC?</P> Thu, 10 Feb 2022 14:09:56 GMT nurulams0 2022-02-10T14:09:56Z https://live.paloaltonetworks.com/t5/vm-series-in-the-public-cloud/vm-300-syslog-to-azure-sentinel/m-p/380983#M1103 <P>I try to setup syslog forwarding to Azure Sentinel butt the vm-300 does not send Threat logs.</P><P>&nbsp;</P><P>I created a syslog server udp 514 and used&nbsp;<A href="https://docs.paloaltonetworks.com/content/dam/techdocs/en_US/pdf/cef/pan-os-91-cef-configuration-guide.pdf" target="_blank">https://docs.paloaltonetworks.com/content/dam/techdocs/en_US/pdf/cef/pan-os-91-cef-configuration-guide.pdf</A>&nbsp;for custom CEF format.</P><P>&nbsp;</P><P>I configured the log forwarder to forward all threat logs.</P><P>&nbsp;</P><P>I configured the policies to use the log forwarder rule.</P><P>&nbsp;</P><P>when I run a tcp dump on the syslog server I dont see any logs comming in.</P><P>&nbsp;</P><P>When I configure the traffic logs as above I do get all the logs.</P><P>&nbsp;</P> Wed, 20 Jan 2021 13:53:05 GMT https://live.paloaltonetworks.com/t5/vm-series-in-the-public-cloud/vm-300-syslog-to-azure-sentinel/m-p/380983#M1103 Retired Member 2021-01-20T13:53:05Z https://live.paloaltonetworks.com/t5/vm-series-in-the-public-cloud/vm-300-syslog-to-azure-sentinel/m-p/464881#M1455 <P>Hi. May I know if you still face this issue? I also have similar issue with this. Any reponse from TAC?</P> Thu, 10 Feb 2022 14:09:56 GMT https://live.paloaltonetworks.com/t5/vm-series-in-the-public-cloud/vm-300-syslog-to-azure-sentinel/m-p/464881#M1455 nurulams0 2022-02-10T14:09:56Z