topic Re: PANOS Syslog Forwarding Not Working in General Topics

PANOS Syslog Forwarding Not Working

jnewsome — Fri, 13 Apr 2018 22:13:03 GMT

Team,

I've followed this process exactly and I am not seeing any hits in my MM instance. I had this working at some point in the past so I'm not sure what's changed. This is a new MM instance. Netstat does show an active TCP connection between my MM instance and my Firewall on TCP port 13514.

https://live.paloaltonetworks.com/t5/MineMeld-Articles/Correlating-PAN-OS-syslog-with-indicators/ta-p/72078

Thanks!

-JN

Re: PANOS Syslog Forwarding Not Working

lmori — Mon, 16 Apr 2018 12:58:47 GMT

Hi @jnewsome,

we are working on updating MineMeld to support the latest changes in PAN-OS log format. Which version of PAN-OS are you running on?

Thanks,

luigi

Re: PANOS Syslog Forwarding Not Working

jnewsome — Mon, 16 Apr 2018 15:35:38 GMT

Thanks Luigi!

I'm on PANOS 8.1. I can downgrade as this is a demo system. What is the latest PANOS release that supports this feature?

Thanks again!

-John Newsome

Re: PANOS Syslog Forwarding Not Working

jnewsome — Tue, 17 Apr 2018 02:42:37 GMT

Hi Luigi,

Forgot that my demo system is a VM-50 which does not support less than PANOS 8.x. Do you have an ETA on when MM will get an update to support the new 8.x logging format? This syslog feature has been a part of my demo script. I can work around it but it does add a bit of sizzle to my demos 🙂

Thanks!

-John Newsome