topic Re: PAN syslog stream into AWS S3 bucket in General Topics

PAN syslog stream into AWS S3 bucket

danecott — Mon, 18 Jul 2016 18:56:23 GMT

I am looking for creative ways to get my VM-300 instances to syslog directly into an S3 bucket for pickup by our logging systems.

Given the PAN only has the ability to send syslog TCP to an endpoint I am not sure this is possible without some middleware.

Has anyone else figured something out to achieve this?

Re: PAN syslog stream into AWS S3 bucket

BPry — Mon, 18 Jul 2016 20:18:18 GMT

I haven't tried this but I wonder if you couldn't do this with CloudBerry and assigning a network drive on a PC that simply points to your S3 bucket. I had this running a while back with a Google Cloud Storage buget with some of my clients backups perfectly fine so I don't see why this wouldn't work there?

Re: PAN syslog stream into AWS S3 bucket

abhishah03 — Thu, 22 Apr 2021 18:09:01 GMT

Any solution ??

Re: PAN syslog stream into AWS S3 bucket

abhishah03 — Thu, 13 May 2021 18:51:33 GMT

@jmeurer , @BPry , @Warby -- Any pointers .

Re: PAN syslog stream into AWS S3 bucket

jmeurer — Thu, 13 May 2021 19:01:24 GMT

You need a sidecar to move the data to S3. It is documented here. Rather than moving through to Lambda, you would use CloudWatch or Kinises to send the data to S3.

https://aws.amazon.com/blogs/apn/monitoring-your-palo-alto-networks-vm-series-firewall-with-a-syslog-sidecar/

Re: PAN syslog stream into AWS S3 bucket

abhishah03 — Fri, 14 May 2021 07:19:52 GMT

Thanks for sharing , I will try to explore this option.