Is it possible to exclude a particular IP from forwarding logs to the syslog server, that too particularly deny logs for that IP

Kandarp_Desai — Wed, 29 Jun 2022 10:00:28 GMT

Re: Is it possible to exclude a particular IP from forwarding logs to the syslog server, that too particularly deny logs for that IP

PavelK — Wed, 29 Jun 2022 12:44:33 GMT

you should be able to accomplish this by placing a filter. Could you navigate to: Panorama > Collector Groups > [Collector Group Name] > Collector Log Forwarding > Traffic > [Name of log forwarding profile], then put into filter field what you want to exclude. For example send to syslog server everything except deny log for ip address:

!(addr in X.X.X.X) and (action eq deny)

Kind Regards

Pavel

topic Re: Is it possible to exclude a particular IP from forwarding logs to the syslog server, that too particularly deny logs for that IP in Panorama Discussions

Is it possible to exclude a particular IP from forwarding logs to the syslog server, that too particularly deny logs for that IP

Re: Is it possible to exclude a particular IP from forwarding logs to the syslog server, that too particularly deny logs for that IP