topic Re: Alarm Log Forwarding in General Topics

Alarm Log Forwarding

fhewiufhwefhwe — Fri, 29 May 2020 13:24:17 GMT

Instead of seeing alarms when I login to the web GUI, how can I get alarms forwarded? I'd like to send to SysLogs and also receive via email.

Re: Alarm Log Forwarding

shawnhafen — Fri, 29 May 2020 16:33:54 GMT

This can be done, there are limitations but for the most part you can tune and configure this using the following steps to start: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClGjCAK

Re: Alarm Log Forwarding

fhewiufhwefhwe — Fri, 29 May 2020 16:40:56 GMT

I downloaded system logs to csv. While I see when I manually cleared logs that were near capacity, I do not see any warnings about logs being full. Do you happen to know the type, event, or description key word? I looked at everything with log in the description, and didn't see it.

Re: Alarm Log Forwarding

shawnhafen — Fri, 29 May 2020 17:05:06 GMT

Not sure what those look like as I am not experiencing low disk issues atm but if you cannot set up a filter on anything in the logs (like this)

Then maybe you can set up an email alert in your SNMP monitoring solution (if you do not have one then you can get a free version of PRTG, or use LibreNMS which is free and supports PAN devices very well)

Re: Alarm Log Forwarding

fhewiufhwefhwe — Fri, 29 May 2020 17:26:25 GMT

Thanks, I will take a look at PRTG.

I already am forwarding logs to two Syslog servers, but also didn't see the alarms there.