<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Syslog Custom Log Format in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/syslog-custom-log-format/m-p/314202#M81070</link>
    <description>&lt;P&gt;Thanks. Maybe a feature request to change behavior to allow for adding fields to default rather than having to recreate and potentially miss some fields.&lt;/P&gt;</description>
    <pubDate>Tue, 03 Mar 2020 17:02:50 GMT</pubDate>
    <dc:creator>MikeSangray2019</dc:creator>
    <dc:date>2020-03-03T17:02:50Z</dc:date>
    <item>
      <title>Syslog Custom Log Format</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/syslog-custom-log-format/m-p/314005#M81025</link>
      <description>&lt;P&gt;If I use a custom log format for syslog does the new custom format replace the existing default format?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;So if I want syslog to send before-change-detail and after-change-detail do I have to add every default field to the new custom format so I get default+custom?&lt;/P&gt;</description>
      <pubDate>Mon, 02 Mar 2020 21:05:58 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/syslog-custom-log-format/m-p/314005#M81025</guid>
      <dc:creator>MikeSangray2019</dc:creator>
      <dc:date>2020-03-02T21:05:58Z</dc:date>
    </item>
    <item>
      <title>Re: Syslog Custom Log Format</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/syslog-custom-log-format/m-p/314017#M81026</link>
      <description>&lt;P&gt;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/124213"&gt;@MikeSangray2019&lt;/a&gt;,&lt;/P&gt;&lt;P&gt;That is correct. Once you've customized the log format you'll need to actually include everything that you would actually want in the message, otherwise whatever is left out will be missing.&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Mon, 02 Mar 2020 21:54:17 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/syslog-custom-log-format/m-p/314017#M81026</guid>
      <dc:creator>BPry</dc:creator>
      <dc:date>2020-03-02T21:54:17Z</dc:date>
    </item>
    <item>
      <title>Re: Syslog Custom Log Format</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/syslog-custom-log-format/m-p/314202#M81070</link>
      <description>&lt;P&gt;Thanks. Maybe a feature request to change behavior to allow for adding fields to default rather than having to recreate and potentially miss some fields.&lt;/P&gt;</description>
      <pubDate>Tue, 03 Mar 2020 17:02:50 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/syslog-custom-log-format/m-p/314202#M81070</guid>
      <dc:creator>MikeSangray2019</dc:creator>
      <dc:date>2020-03-03T17:02:50Z</dc:date>
    </item>
    <item>
      <title>Re: Syslog Custom Log Format</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/syslog-custom-log-format/m-p/314262#M81077</link>
      <description>&lt;P&gt;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/124213"&gt;@MikeSangray2019&lt;/a&gt;,&lt;/P&gt;&lt;P&gt;If you put in a feature request and get the FR ID number let us know so we can have it added to the community feature request list.&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Tue, 03 Mar 2020 20:48:42 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/syslog-custom-log-format/m-p/314262#M81077</guid>
      <dc:creator>BPry</dc:creator>
      <dc:date>2020-03-03T20:48:42Z</dc:date>
    </item>
  </channel>
</rss>

