My system have two syslog server. I want configure Palo Alto forward log message ( System log and Traffic log) to two syslog server concurrently.
I don't know where to configure. Please help me ?
1- from Device - Server Profiles - Syslog
Create a profile and add 2 syslog servers here (inside the same profile )
2- go to Objects- Log forwarding and Create an object here (choose which logs will be forwarded - choose the profile you created)
3- For every security rule you want to forward its log go and choose the log forwarding profile (in Policies - Security - inside the rule Actions - Log forwarding )
4- For system or config logs you have to choose the syslog object from Device - Log settings - system/Config
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!
The Live Community thanks you for your participation!