<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Only correlated events with &amp;quot;critical&amp;quot; severity shows up  in Panorama. in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/only-correlated-events-with-quot-critical-quot-severity-shows-up/m-p/70690#M40579</link>
    <description>&lt;P&gt;&lt;SPAN&gt;Hi All,&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;I tried to look up for this info, but didn't get much help.&amp;nbsp;Not all "correlated events" are showing up in Panorama, If I change my context to the individual firewall I&amp;nbsp;can see all correlated events. But the only ones that appear to forward to panorama are the ones flagged as "critical" severity. &lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Also based off my reserach, I do see snapshots of events&amp;nbsp;other than "critical" showing up under Panorama correlated event logs.&amp;nbsp;Could you please help me with &amp;nbsp;this information. Thanks&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Regards,&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Bushra&lt;/P&gt;</description>
    <pubDate>Thu, 14 Jan 2016 17:53:05 GMT</pubDate>
    <dc:creator>bsyeda</dc:creator>
    <dc:date>2016-01-14T17:53:05Z</dc:date>
    <item>
      <title>Only correlated events with "critical" severity shows up  in Panorama.</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/only-correlated-events-with-quot-critical-quot-severity-shows-up/m-p/70690#M40579</link>
      <description>&lt;P&gt;&lt;SPAN&gt;Hi All,&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;I tried to look up for this info, but didn't get much help.&amp;nbsp;Not all "correlated events" are showing up in Panorama, If I change my context to the individual firewall I&amp;nbsp;can see all correlated events. But the only ones that appear to forward to panorama are the ones flagged as "critical" severity. &lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Also based off my reserach, I do see snapshots of events&amp;nbsp;other than "critical" showing up under Panorama correlated event logs.&amp;nbsp;Could you please help me with &amp;nbsp;this information. Thanks&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Regards,&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Bushra&lt;/P&gt;</description>
      <pubDate>Thu, 14 Jan 2016 17:53:05 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/only-correlated-events-with-quot-critical-quot-severity-shows-up/m-p/70690#M40579</guid>
      <dc:creator>bsyeda</dc:creator>
      <dc:date>2016-01-14T17:53:05Z</dc:date>
    </item>
    <item>
      <title>Re: Only correlated events with "critical" severity shows up  in Panorama.</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/only-correlated-events-with-quot-critical-quot-severity-shows-up/m-p/70723#M40584</link>
      <description>&lt;P&gt;The first thing that I would do is go into your Device -&amp;gt; Log Settings -&amp;gt; System and themn look at the settings and see which ones are configured to sent to Panorama.&lt;/P&gt;
&lt;P&gt;&lt;IMG src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/1988i4D51CB933F348607/image-size/original?v=mpbl-1&amp;amp;px=-1" border="0" alt="2016-01-11_17-09-21.png" title="2016-01-11_17-09-21.png" /&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Please check that and ensure that Panorama is checked for what you want to send to Panorama.&lt;/P&gt;</description>
      <pubDate>Mon, 11 Jan 2016 23:12:58 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/only-correlated-events-with-quot-critical-quot-severity-shows-up/m-p/70723#M40584</guid>
      <dc:creator>jdelio</dc:creator>
      <dc:date>2016-01-11T23:12:58Z</dc:date>
    </item>
  </channel>
</rss>

