https://live.paloaltonetworks.com/t5/general-topics/what-is-syslog-connection-established-to-server-af-unix-opt/m-p/186793#M56935 <P>Yes this is normal, this is the connection for receiving syslog messages from the log ingestion profile. Syslog-ng forwards the received logs to logd for processing.</P> Tue, 14 Nov 2017 00:28:36 GMT BBerg 2017-11-14T00:28:36Z https://live.paloaltonetworks.com/t5/general-topics/what-is-syslog-connection-established-to-server-af-unix-opt/m-p/186633#M56909 <P>Hello,</P><P>&nbsp;</P><P>we have the following event in our panorama log:</P><P>&nbsp;</P><P>Type: syslog</P><P>Severity: high</P><P>Event:syslog-conn-status</P><P><!-- bower:css --><!-- endinject --><!-- endbuild --><!-- customer:app_css --><!-- endinject --><!-- endbuild --></P><DIV class="layout-column flex"><DIV class="layout-row flex"><DIV class="mx-main-content-zone-container mx-shell-left-nav-left-offset layout-row flex"><DIV class="mx-side-layout flex hide-add"><DIV class="mx-side-panel-content"><DIV><DIV><DIV class="mx-side-panel-details-view"><DIV class="mx-side-panel-details-view-body flex view-added"><DIV class="mx-dialog-content"><DIV class="mx-dialog-content--inner flex"><DIV class="flex"><DIV class="layout-root-container"><DIV class="layout-row-container "><DIV class="layout-row "><DIV class="mx-flex-10 flex layout_container_mode_panel "><DIV class=" layout_container_mode_panel_inner"><DIV class="panel-title">Description: 'Syslog connection established to server[\'AF_UNIX./opt/pancfg/mgmt/syslogng/logd.\'</DIV><DIV class="panel-title">&nbsp;</DIV><DIV class="panel-title">Can anyone please explain what this means? Is this the syslog-connection of the local Panorama-device to its filesystem?</DIV><DIV class="panel-title">The event occours serveral times (7) with the same timestamp in succession in different time interval. Is this normal?</DIV><DIV class="panel-title">&nbsp;</DIV><DIV class="panel-title">Thanks in advance</DIV><DIV class="panel-title">&nbsp;</DIV><DIV class="panel-title">Marco</DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV> Mon, 13 Nov 2017 09:51:24 GMT https://live.paloaltonetworks.com/t5/general-topics/what-is-syslog-connection-established-to-server-af-unix-opt/m-p/186633#M56909 Clermont 2017-11-13T09:51:24Z https://live.paloaltonetworks.com/t5/general-topics/what-is-syslog-connection-established-to-server-af-unix-opt/m-p/186793#M56935 <P>Yes this is normal, this is the connection for receiving syslog messages from the log ingestion profile. Syslog-ng forwards the received logs to logd for processing.</P> Tue, 14 Nov 2017 00:28:36 GMT https://live.paloaltonetworks.com/t5/general-topics/what-is-syslog-connection-established-to-server-af-unix-opt/m-p/186793#M56935 BBerg 2017-11-14T00:28:36Z