topic interface flapping syslog severity info! in General Topics

interface flapping syslog severity info!

plevesque — Thu, 19 Jan 2017 14:43:51 GMT

Hello,

I am always wondering why an interface going down/up is being flagged by syslog as a severity : informational !

2014/10/11 15:29:08 info port link-ch 0 Port 1: Down 1Gb/s-full duplex
2014/10/11 15:29:08 info port link-ch 0 Port 2: Down 1Gb/s-full duplex

How it is possible to modify this to critical and start receiving alert on interface status change.

Thank you

Pierrick,

Re: interface flapping syslog severity info!

kiwi — Fri, 20 Jan 2017 08:31:45 GMT

Hi @plevesque,

This is currently not possible.

However, PAN-OS 8.0 to the rescue !

PAN-OS 8.0 adds a feature that will expand log filtering from the granularity of severity to the granularity of a user defined filter for log forwarding purposes. Log forwarding profiles will have filters that are similar to the ones on the monitor tab.

Cheers !

-Kim.

Re: interface flapping syslog severity info!

plevesque — Fri, 20 Jan 2017 09:47:34 GMT

Thank you Kiwi!

This is a great news, looking forward to use PAN-OS 8.XX

Kind regards

Pierrick,