topic Re: Need sample logs for all Next Generation Firewall log events for Integration Testing in Next-Generation Firewall Discussions

Need sample logs for all Next Generation Firewall log events for Integration Testing

suresh.nalamolu — Fri, 20 Jun 2025 08:03:25 GMT

Hi team,

I'm currently working on integrating log analysis and would like to collect sample log events for all Next Generation Firewall log event types

Is there a way to access a reference dataset or sample payloads for each log event type for testing and validation purposes?

Thanks in advance!

Re: Need sample logs for all Next Generation Firewall log events for Integration Testing

OtakarKlier — Mon, 23 Jun 2025 19:43:17 GMT

Hello,

I'm have not seen one. I do alert on High and Critical events. Alerting by criticality rather than an actual event. Some events I do create specific alerts on however.

Is this for a SIEM or from the PAN?

Regards,

Re: Need sample logs for all Next Generation Firewall log events for Integration Testing

suresh.nalamolu — Tue, 24 Jun 2025 03:36:50 GMT

Thanks for your response.

Just to clarify, I’m looking for logs for both:

SIEM Integration: We’re testing alert rules and correlation based on Palo Alto Networks (PAN) logs. This includes high and critical severity events, along with specific log types like threat, traffic, config, and system logs.
Direct from PAN: We’re also reviewing alerting capabilities directly from the PAN platform, so we need log samples to help with testing, enrichment, and validation.

If you could share sample logs (sanitized if needed) for key PAN log types like THREAT, TRAFFIC, SYSTEM, CONFIG, HIPMATCH, and CORRELATION, that would be very helpful for our integration work.

Thanks again

Re: Need sample logs for all Next Generation Firewall log events for Integration Testing

murali438 — Tue, 24 Jun 2025 12:07:50 GMT

I'm not sure about the platform you are using but I found this

PaloAltoNetworks/Splunk-App-Data-Generator: Sample data generator for the Splunk for Palo Alto Networks app.

Re: Need sample logs for all Next Generation Firewall log events for Integration Testing

suresh.nalamolu — Tue, 01 Jul 2025 06:10:20 GMT

Any update

Re: Need sample logs for all Next Generation Firewall log events for Integration Testing

suresh.nalamolu — Wed, 09 Jul 2025 07:24:22 GMT

can you provide sample schema for these THREAT, TRAFFIC, SYSTEM, CONFIG, HIPMATCH, and CORRELATION in Json format.

Re: Need sample logs for all Next Generation Firewall log events for Integration Testing

ozheng — Thu, 10 Jul 2025 02:59:47 GMT

Hello @suresh.nalamolu

You can find all the fields for each type of logs in the documentation.
https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-admin/monitoring/use-syslog-for-monitoring/syslog-field-descriptions

Olivier