Send Generated Alarms to Syslog

[kalyanram.piratla]

Hi Guys,

I was wondering if there was a way to send the Alarm messages on the firewall to a syslog.  For example an alarm like "Current size (39047 MB) of traffic log database exceeds alarm threshold value (90%) of total allowed size (39037 MB)".

Is there any way I can have that sent to a syslog server.  I have threats being sent to my syslog server, traffic logs etc.. but unable to figure out a way to get the alarms through.

Many Thanks..

Regards,

Kal

[ppatel]

Hi Kal.

As far as I know, currently there is no way we can do log forwardign for Alarm Logs on to a syslog server.

You can enable CLI and Web alarm notifications though.

Device--> Log Settings -->Alarms

The syslog server profile also does not have the way to forward logs to syslog.

Also per the admin guide 4.0, You can view the current list of alarms at any time by clicking the Alarms icon in thelower right corner of the web interface. This opens a window that lists the unacknowledgedand acknowledged alarms in the current alarms log. To acknowledge alarms, select theircheck boxes and click Acknowledge. This action moves the alarms to the AcknowledgeAlarms list. The alarms window also includes paging, column sort, and refresh controls

Regards,

Parth

[kalyanram.piratla]

Hi Parth,

Thanks for the information.  I had all that done before posting my question .  It would be an added advantage if we could have log forwarding for alarms.

For example; Once the firewall has been configured and is put in production, the customer would usually login frequently for the first couple of months after which it would just be once in a while.  In this scenario, this would really help as we can have alerts forwarded.

Can we have this a feature request..??

Cheers..

Kalyan

[ppatel]

Hi Kalyan,

For any issues related to design, feature request, licenseing for the product please contact the Reseller from whom you purchased the device (as a first point of contact) or Palo Alto Networks Sales Engineering Team if you bought the device directly from us.

If you donot happen to know your Regional sales Engineer, please get in touch with our sales Team at the follwoing E-mail.

Sales Inquiries
US and North America:

contact_sales@paloaltonetworks.com

Regards,

Parth

[kalyanram.piratla · Accepted solution]

Hi Parth,

I work for a reseller in UK.  I install PA's and even do the evaluations.  Hence stated about feature request here.  I will speak to my SE on this.

Cheers..

Kalyan