topic Re: syslog query in General Topics

syslog query

VishnuPS — Wed, 22 Sep 2021 14:26:23 GMT

Hi team,

We have 1000+ security policies and 2 Syslog servers.

can we enable two Syslog profiles simultaneously on the same policy

Also, how can we enable the Syslog profile in the bulk policy or in 1000+ policy we need to add the Syslog profile manually

Kindly put your valuable inputs on this.

Regards,

Vishnu

Re: syslog query

rdonohoe23 — Wed, 22 Sep 2021 17:27:18 GMT

Hi Vishnu,

You enable log forwarding on the policies and you can list two syslog servers on the same log forwarding profile. In regards to bulk changes you can use Expedition , which easily allows multi rule edits. If expedition is not possible to be deployed you can use another API tool can PAN configurator to make changes on thousands of rules quick style.

https://live.paloaltonetworks.com/t5/api-articles/pan-configurator-scripting-library-and-utilities/ta-p/52163

https://live.paloaltonetworks.com/t5/expedition/ct-p/migration_tool

cheers

Rob

Re: syslog query

swaschkut — Fri, 12 Nov 2021 07:37:09 GMT

Please be aware that pan-configurator project was replaced with PAN-OS-PHP;

https://live.paloaltonetworks.com/t5/api-articles/pan-os-php-scripting-library-and-utilities/ta-p/404396
https://github.com/PaloAltoNetworks/pan-os-php

PAN-OS-PHP had the same but already improved and extended feature set compare to pan-configurator.

regards
Sven