XSIAM logs from Palo Alto Firewall using syslog

bridgetlitt — Fri, 21 Aug 2026 05:33:34 GMT

https://cortex-docs.paloaltonetworks.com/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/palo-alto-networks-integrations/next-generation-firewall/ingest-next-generation-firewall-logs-using-the-syslog-collector

Why does the official guide only highlight Custom Formats for Traffic, Threat, URL, and File data logs? What about other NGFW/panorama log types, such as System logs where can I find the format for those?

Does Cortex XSIAM fail to parse remaining CEF logs properly, or does this mean other log categories are unsupported?

topic XSIAM logs from Palo Alto Firewall using syslog in Cortex XSIAM Discussions

XSIAM logs from Palo Alto Firewall using syslog