URL log forwarding to syslog servers, but not all informational threat logs.

Premchand — Tue, 09 May 2017 09:56:27 GMT

we need to forward url filtering logs from PaloAlto to syslog server ( similarly from Panorama to syslog server.)

To do this we need to to forward the Threat "Informational" logs ( generally url filtering logs are part of threat "informational logs ).

But we do not want to forward all "informational" threat logs to syslog servers as it will add lot of space to the syslog server.

So is there any way we can only forward the url logs, but not all informational threat logs.

Pan OS version : 7.1.7

Re: URL log forwarding to syslog servers, but not all informational threat logs.

reaper — Tue, 09 May 2017 10:10:10 GMT

if you're willing to upgrade to PAN-OS 8.0 you can add filtering to your log forwarding profile