topic Forward log to two syslog server concorrently in General Topics

Forward log to two syslog server concorrently

Register_Security — Tue, 22 Oct 2013 09:06:35 GMT

Hi there,

My system have two syslog server. I want configure Palo Alto forward log message ( System log and Traffic log) to two syslog server concurrently.

I don't know where to configure. Please help me ?

Re: Forward log to two syslog server concorrently

Retired Member — Tue, 22 Oct 2013 10:11:18 GMT

Hi,

1- from Device - Server Profiles - Syslog

Create a profile and add 2 syslog servers here (inside the same profile )

2- go to Objects- Log forwarding and Create an object here (choose which logs will be forwarded - choose the profile you created)

3- For every security rule you want to forward its log go and choose the log forwarding profile (in Policies - Security - inside the rule Actions - Log forwarding )

4- For system or config logs you have to choose the syslog object from Device - Log settings - system/Config

Re: Forward log to two syslog server concorrently

shasnain — Tue, 22 Oct 2013 13:54:32 GMT

Re: Forward log to two syslog server concorrently

Register_Security — Wed, 23 Oct 2013 08:01:55 GMT

Thanks in advance !