topic Re: we are not getting URL in syslogs, is there any way to URL in syslogs? in General Topics

we are not getting URL in syslogs, is there any way to URL in syslogs?

LCMember3226 — Tue, 31 Mar 2015 14:01:59 GMT

<190>Mar 31 08:52:56 XXXX-firewall-name 1,2015/03/31 08:52:55,001606005137,TRAFFIC,end,1,2015/03/31 08:52:55,source_ip,,destination_ip,trust-untrust-web-services,,,paloalto-wildfire-cloud,vsys1,trust,untrust,ethernet1/1,ethernet1/3,Log_Forward,2015/03/31 08:52:55,57030,1,42349,443,45974,443,0x400053,tcp,allow,2319,1200,1119,20,2015/03/31 08:50:26,
120,business-and-economy,0,113995574,0x0,XXXXXXXXX.255.255,SG,0,11,9,tcp-rst-from-client

Re: we are not getting URL in syslogs, is there any way to URL in syslogs?

merrydc — Tue, 31 Mar 2015 16:27:21 GMT

The log you show is a traffic log. The URL is logged in the Threat log I believe. Below is an excerpt from another discussion on this URL logging subject.

In order to forward URL logs, it is necessary to forward Threat logs of Severity "informational" to the Syslog server. Doing so will forward other informational threat logs (Data Filtering) in addition to URL logs.

Please refer to the following document for more information on how to configure URL log forwarding to Syslog: How to Forward Threat Logs to Syslog Server

Re: we are not getting URL in syslogs, is there any way to URL in syslogs?

Satish — Wed, 01 Apr 2015 07:37:33 GMT

Hi Rohan,

pls add the top url,top url user top url-user -behavior. and let us know.

Thanks

Satish

Re: we are not getting URL in syslogs, is there any way to URL in syslogs?

LCMember3226 — Tue, 26 May 2015 10:10:21 GMT

Thx..working now