Unknow email address suffixed on PA Syslog

Mohammed_Yasin — Wed, 06 Jul 2022 07:40:13 GMT

Few emails are neither registered nor getting suffixed from the Splunk SIEM solution.

A TCP dump from the server to identify whether the logs with the email address abcdef@123.com are coming directly from the PA firewall shows that those are from the PA-5220 firewall.

Is any email address suffixed on PA Syslog shall it can be removed the email address from the Syslog if there is a hidden configuration setting that exists on PAN-OS.

Re: Unknow email address suffixed on PA Syslog

reaper — Wed, 06 Jul 2022 14:00:14 GMT

email addresses contained in sessions will not be replaced by the firewall

you can however create an smtp profile in log forwarding/server profiles and freestyle any email address you like in there. search the configuration for this mail address

> set cli config-output-formet set > configure # show | match abcdef@123.com

topic Unknow email address suffixed on PA Syslog in General Topics

Unknow email address suffixed on PA Syslog

Re: Unknow email address suffixed on PA Syslog