topic Re: ThreatLog forwarding doesnt work in General Topics

ThreatLog forwarding doesnt work

bhavin_bhatt — Tue, 19 Jul 2011 08:18:45 GMT

Hi All,

I have configured the PaloAlto to email me threatn logs for medium , high and critical alerts, but it seems to email me only medium threat alerts, how do i fix this 😞

Please find attached my log forwarding profile.

My email profile is configured fine, as i can receive system alert emails etc, but only with threat alerts, all i get is medium, even though in the threat logs there is loads of high and critical alerts.

Cheers

Bhav

Re: ThreatLog forwarding doesnt work

mrajdev — Tue, 19 Jul 2011 14:46:59 GMT

Hi Bhav,

Can you please open up a support case for this issue.

Thanks

Re: ThreatLog forwarding doesnt work

Retired Member — Fri, 13 Apr 2012 12:04:59 GMT

Hi, we have the same problem with PAN-OS 4.1.4 on an PA-2050.

But we don't get any Threat Log by mail.

With PAN-OS 4.1.3 it worked.

Is this a known issue?

Regards

Christoph

Re: ThreatLog forwarding doesnt work

emr_1 — Fri, 13 Apr 2012 12:34:32 GMT

This issue should be fixed in v4.1.5.

From RN of v4.1.5

========

37608 – Threat logs not being forwarded to the syslog server, although other logs worked
fine. Issue due to a problem with the log forwarding queue for threat logs.

========

Regards,

Emr

Re: ThreatLog forwarding doesnt work

Retired Member — Fri, 13 Apr 2012 12:43:20 GMT

Thanks I will try this.

I read the RN of 4.1.5 but there was nothing with mail profile an Threat Log.

Re: ThreatLog forwarding doesnt work

emr_1 — Fri, 13 Apr 2012 12:45:25 GMT

On my test with PA-500 v4.1.5.

Alert-mail is working fine.

Hopefully your PA2000 will work fine too.

Re: ThreatLog forwarding doesnt work

Retired Member — Sat, 14 Apr 2012 07:20:07 GMT

I installed the 4.1.5 and now it works.

Thank you!