topic Re: How to forward traffic (URL) to a syslog server? in General Topics https://live.paloaltonetworks.com/t5/general-topics/how-to-forward-traffic-url-to-a-syslog-server/m-p/3531#M2604 <HTML><HEAD></HEAD><BODY><P>URL logs are actually threat logs, listed as informational severity (as in the screenshot at the bottom of the page you linked). When you send the informational severity threat logs, that will contain the URL if you supply the $misc token.</P><P></P><P>-Greg</P></BODY></HTML> Tue, 14 Apr 2015 23:15:37 GMT gwesson 2015-04-14T23:15:37Z How to forward traffic (URL) to a syslog server? https://live.paloaltonetworks.com/t5/general-topics/how-to-forward-traffic-url-to-a-syslog-server/m-p/3530#M2603 <HTML><HEAD></HEAD><BODY><P>The $misc variable can only be used for Threats?</P><P>How to register the URL in syslog server?</P><P></P><P></P><P></P><P>CEF Key Name: <STRONG>request</STRONG></P><P>Full Name: <STRONG>requestURL</STRONG></P><P>Data Type: <STRONG>string</STRONG></P><P>Length: <STRONG>1024</STRONG></P><P>Meaning: <STRONG>URL or filename for <SPAN style="text-decoration: underline;">threat</SPAN> logs</STRONG> </P><P>Palo Alto Networks Value Field: <STRONG>$mis</STRONG>c</P><P><EM>from</EM> <A _jive_internal="true" href="/servlet/JiveServlet/previewBody/7088-102-3-24932/Palo Alto Networks_PANOS_6_0_CEF_Configuration Guide_2014.pdf">PANOS_6_0_CEF_Configuration</A></P><P></P><P><A _jive_internal="true" href="https://live.paloaltonetworks.com/docs/DOC-3964">How to Forward Custom URL Logs to a Syslog Server</A></P></BODY></HTML> Tue, 14 Apr 2015 15:48:28 GMT https://live.paloaltonetworks.com/t5/general-topics/how-to-forward-traffic-url-to-a-syslog-server/m-p/3530#M2603 UNIVALI 2015-04-14T15:48:28Z Re: How to forward traffic (URL) to a syslog server? https://live.paloaltonetworks.com/t5/general-topics/how-to-forward-traffic-url-to-a-syslog-server/m-p/3531#M2604 <HTML><HEAD></HEAD><BODY><P>URL logs are actually threat logs, listed as informational severity (as in the screenshot at the bottom of the page you linked). When you send the informational severity threat logs, that will contain the URL if you supply the $misc token.</P><P></P><P>-Greg</P></BODY></HTML> Tue, 14 Apr 2015 23:15:37 GMT https://live.paloaltonetworks.com/t5/general-topics/how-to-forward-traffic-url-to-a-syslog-server/m-p/3531#M2604 gwesson 2015-04-14T23:15:37Z