System log severity change

bsimunko@recro-net.hr — Fri, 19 Apr 2013 08:46:10 GMT

Hello!

Is there a way to change the severity level of certain system log messages? The PANOS is 4.1.9

The issue we are having is that our customer is "spammed" with e-mail notifications from their HA devices that the signature versions do not match.

Both devices are scheduled to download-and-install new content every night at the same time, independantly.

The same happens with or without the "Sync to HA peer" option. We would still like to receive "high" severity alerts, but not these messages.

These are the messages:

domain: 1
receive_time: 2013/04/18 01:12:58
serial: XXXXXXXXX
seqno: 1712
actionflags: 0x0
type: SYSTEM
subtype: ha
config_ver: 0
time_generated: 2013/04/18 01:12:58
vsys:
eventid: peer-version-match
object:
fmt: 0
id: 0
module: general
severity: high
opaque: HA Group 1: Application Content version does not match

domain: 1
receive_time: 2013/04/18 01:12:58
serial: XXXXXXXXX
seqno: 2474
actionflags: 0x0
type: SYSTEM
subtype: ha
config_ver: 0
time_generated: 2013/04/18 01:12:58
vsys:
eventid: peer-version-match
object:
fmt: 0
id: 0
module: general
severity: high
opaque: HA Group 1: Application Content version does not match

domain: 1
receive_time: 2013/04/18 01:12:59
serial: XXXXXXXXX
seqno: 2475
actionflags: 0x0
type: SYSTEM
subtype: ha
config_ver: 0
time_generated: 2013/04/18 01:12:59
vsys:
eventid: peer-version-match
object:
fmt: 0
id: 0
module: general
severity: high
opaque: HA Group 1: Threat Content version does not match

domain: 1
receive_time: 2013/04/18 01:12:59
serial: XXXXXXXXX
seqno: 1713
actionflags: 0x0
type: SYSTEM
subtype: ha
config_ver: 0
time_generated: 2013/04/18 01:12:59
vsys:
eventid: peer-version-match
object:
fmt: 0
id: 0
module: general
severity: high
opaque: HA Group 1: Threat Content version does not match

domain: 1
receive_time: 2013/04/18 02:14:05
serial: XXXXXXXXX
seqno: 1731
actionflags: 0x0
type: SYSTEM
subtype: ha
config_ver: 0
time_generated: 2013/04/18 02:14:05
vsys:
eventid: peer-version-match
object:
fmt: 0
id: 0
module: general
severity: high
opaque: HA Group 1: Anti-Virus version does not match

domain: 1
receive_time: 2013/04/18 02:14:05
serial: XXXXXXXXX
seqno: 2488
actionflags: 0x0
type: SYSTEM
subtype: ha
config_ver: 0
time_generated: 2013/04/18 02:14:05
vsys:
eventid: peer-version-match
object:
fmt: 0
id: 0
module: general
severity: high
opaque: HA Group 1: Anti-Virus version does not match

Re: System log severity change

OCDBE — Fri, 19 Apr 2013 14:31:14 GMT

Apparently this is not possible, I was just looking for this myself.

Check out this related post:

https://live.paloaltonetworks.com/message/9196#9196

Re: System log severity change

bsimunko@recro-net.hr — Fri, 19 Apr 2013 15:00:26 GMT

I saw that post, but it is from 2011, and he/she did not write which OS was in question...

Re: System log severity change

Retired Member — Fri, 19 Apr 2013 15:49:57 GMT

This is a feature request.We talked this with PaloAlto last month.

topic Re: System log severity change in General Topics

System log severity change

Re: System log severity change

Re: System log severity change

Re: System log severity change