topic Re: Email notification recurrence add in General Topics

Email notification recurrence add

MRamadanAHafiez — Sun, 02 Feb 2025 12:04:57 GMT

Hello Team,

I have panos 11.2.3-h3, I am managing to creat an email notification when a specific event occure.

I made this by creating the report in "Manage Custom Report -> then creating the required querry".

my issue that is now I need configure an ocurence when is about "last legs within last 5 minutes" and run the report as task every 5 minutes too.

the issue that when creating the custom report, the report cant be run in durations of less than 15 mins nd also the email scheduler occurence cant be less than a Day.

Any suggested ways for how to add my custom occurence period?

TIA

Re: Email notification recurrence add

OtakarKlier — Mon, 03 Feb 2025 16:15:44 GMT

Hello,

You can create a custom Log Setting Filter alert for this type of event. However you could be overwhelmed with the amount of emails.

https://docs.paloaltonetworks.com/pan-os/11-2/pan-os-web-interface-help/device/device-log-settings/select-log-forwarding-destinations

Regards,

Re: Email notification recurrence add

BPry — Mon, 03 Feb 2025 19:45:27 GMT

@MRamadanAHafiez,

Outside of what @OtakarKlier already mentioned, you can script this through the API easily enough. The process looks a bit like this:

1. Run the custom report

api?type=report&async=yes&reporttype=custom&reportname=Failed_GP_Login

2. Collect the Job ID from the submission since that's what you'll need to monitor to see if the report has finished. Then just grab the report

api?type=op&cmd=<show><report><id>' + str(job_id) + '</id></report></show>

3. Parse the report and collect the information that you require for the email report. I won't go into detail on this since it'll vary depending on the language being used and what you're attempting to do.