topic Re: customised option for email alert for ISP link up or down in General Topics

customised option for email alert for ISP link up or down

HemanthV — Fri, 28 Sep 2018 06:58:51 GMT

I have a PA firewall, is it possible to create an email alert for ISP link up or down in PA 220 device

Re: customised option for email alert for ISP link up or down

OtakarKlier — Fri, 28 Sep 2018 14:25:18 GMT

Hello,

Just for those events, no. However you can get emails for how critical something is, such as all high and/or critical events, etc.

https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Configure-Email-Alerts-for-System-Logs/tac-p/108974#M1769

Hope that helps.

Re: customised option for email alert for ISP link up or down

BPry — Sat, 29 Sep 2018 15:23:42 GMT

@HemanthV,

Actually in this case you can. You would just configure something like the following. You would just need to make two, one for matching 'Port ethernet1/1: Up' and one for 'Port ethernet1/1: Down'; replace the port with whatever port you have your ISP plugged into.

Re: customised option for email alert for ISP link up or down

OtakarKlier — Tue, 02 Oct 2018 21:08:10 GMT

Sweet! good to know!

Re: customised option for email alert for ISP link up or down

HemanthV — Wed, 03 Oct 2018 07:00:34 GMT

Thanks for the response

I need a small help if i want to filter for two ports what is the special character required or can I add with bracket

from the above picture

can I add like this or need to add a separate filter

(description contains 'port ethernet1/1:Up') (description contains 'port ethernet1/1:Down')

Re: customised option for email alert for ISP link up or down

BPry — Wed, 03 Oct 2018 14:43:29 GMT

@HemanthV,

Generally I just make two entries, but I suppose you could do something like:

(description contains 'port ethernet1/1:Up') or (description contains 'port ethernet1/1:Down') and put them in the same entry perfectly fine.

Re: customised option for email alert for ISP link up or down

HemanthV — Fri, 05 Oct 2018 05:10:52 GMT

Hi BPry

I got one more option for monitoring and customer told its working

For PBF: (eventid eq nh-down)

For Path Monitoring: (eventid eq path-monitor-failure)

Regards

V. Hemanth

Re: customised option for email alert for ISP link up or down

BPry — Fri, 05 Oct 2018 15:26:29 GMT

@HemanthV,

As long as the filter works to display the required logs in the System logs, it would work for the filter.

Re: customised option for email alert for ISP link up or down

HemanthV — Wed, 29 Jul 2020 11:19:29 GMT

Hi Bpray

The below filter is not working