This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
Log Forwarding Discussions
The HTTP Log Forwarding Discussion Forum is a space to share and collaborate on various HTTP log forwarding integrations with the community. Users are encouraged to post their own integrations and engage in discussions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Log Forwarding Discussions
The HTTP Log Forwarding Discussion Forum is a space to share and collaborate on various HTTP log forwarding integrations with the community. Users are encouraged to post their own integrations and engage in discussions.
About Log Forwarding Discussions

Welcome to HTTP Log Forwarding Discussion Forum!

We want to hear from you! The goal of this page is to share and collaborate on different HTTP log forwarding integrations amongst the community. Please feel free to post any integrations that you come up with in the discussions below.

Note: Support for HTTP Log Forwarding scripts/templates is provided here in this Live Community discussion board. Requests for technical support by phone or web will be redirected to this page.

Discussions

Start a conversation

Setting up HTTP server for POST alerts

Anyone have tips or tricks or a guide on setting up and troubleshooting sending logs to HTTP POST?In Panorama, I configured Server Profile > HTTP > set up new server profile.Under Payload Format, starting with Config and System, I set the URI.If I click "Send Test Log" all I get is a generic "Failed to send HTTP request: Invalid configurat...

rjfoster by • L1 Bithead
  • 95 Views
  • 1 replies
  • 0 Likes

Resolved! "Number of hints on disk has exceeded 5000 due to log forward failures."

Hi, I have a client (PA 5220 version 8.0.9) who continuously (every hour) is getting this error message in Monitor -> System: "Number of hints on disk has exceeded 5000 due to log forward failures." At first we thought it was due to the parameter configured under Device -> Setup -> Management -> Logging and Reporting Settings -> M...

While integrating panorama with SIEM server( using Syslog server profile ) for log forwarding from panorama to siem server facing system alert/log on

Spoiler (Highlight to read)Spoiler (Highlight to read)While integrating panorama with SIEM server( using Syslog server profile ) for log forwarding from panorama to siem server facing system alert/log on panorama i.e “ panorama lost it is connection to peer, No logs will be forwarded ”Panorama version- 10.2.4Panorama is in HA but both peer have ...

Slack hooks server certificate invalid

Our firewalls cannot send to hooks.slack.com since they refreshed their cert yesterday (3/14/2023). I suspect a problem with the way their chain is signing X1 root CA but until they fix it, is there a way to allow the log forwarding service to ignore the invalid cert and send anyway? I see a kb article about doing this for decryption profiles, ...

rlarose by • L2 Linker
  • 24878 Views
  • 30 replies
  • 3 Likes

Email alerts on any kind of attack, including attempted access to unauthorized websites or data breaches.

Hi all, i have a requirement of configuring Email Log forwarding, when ever a users tries to access unauthorized websites or resources within our network. NOTE :The mail forwarding should have the source IP address, source user, unauthorized website or resource they tried access and other details. Thanks in advance 🙂

Resolved! syslog behavior when forwarding logs more than one syslog server (failover or replica ?)

Hello Community Champs, I configured two syslog server profiles and forwarding the logs to both servers, here my question is I am recieving traffic logs on both syslog servers but system logs are not recieving on second syslog server (thinking, for system logs it acting as failover?) even my system logs showing me connection established to secon...

RPendela by • L1 Bithead
  • 12509 Views
  • 1 replies
  • 0 Likes

Resolved! How to set selective syslog server?

Can I set palo alto to check if syslog server is up before forwarding the log, and if the main syslog server is down then forward log to another server? I have issues that I need palo alto to not forwarding logs to both servers at the same time.

Theerdam by • L0 Member
  • 9729 Views
  • 3 replies
  • 0 Likes

Syslog connection broken to server Palo Alto every 20 min

Hello,As per title, I have this problem on a HA scenario with two VM-100 installed on VMware. Practically every 20 min in the system logs appears:"Syslog connection broken to server". After 0 sec appears:"Syslog connection is established to server".Can someone help me to better understand what it is?OS version 10.0.5HA active-passiveThx.

Resolved! Getting Error with SNMP Traps

Hi All, We had configured SNMP V3 to forward all the logs to SNMP V3. Is username/Engine ID/Auth and Private Password need to be configured for SNMP v3 to work properly When checking the Logrcvr process log I could see the below error in the Log rcvr processor log: mp logrcvr.log 2021-10-05 16:24:48 2021-10-05 16...

tamilvanan_0-1633528466608.png

How to avoid Netflow record for denied traffic

Hi !we have configured Netflow server and the profile is attached to Inside interface, we are getting Netflow records and it seems working fine. but what we have observed is, we are seeing the Netflows for the traffic which is getting denied by Firewall rule also and they are marked as Flow denied in the event type. i am searching for the optio...

Tulasi by • L0 Member
  • 6271 Views
  • 1 replies
  • 1 Likes

Resolved! Interpreting debug log-receiver statistics command output

Hi All, We are having issue with management plane CPU going high. Upon checking we had identified the Logrcvr process is consuming more memory during the issue time. We are having syslog forwarding profile and Net flow profile configured on the firewall. Had run the command debug log-receiver statistics and got the below output. Can any please ...

Palo Alto Networks App for Splunk - URL Category Logging Issue

There is a flaw in the Palo Alto ‘category’ field reported to Splunk.PA began support for multiple categories in 2019. A given URL can be part of multiple categories. This was done to support parallel data models. Legacy model: by industry (education, computer-and-internet, etc.)A new additional model: by security risk (high, medium, low-risk)...

SCP log export not exporting whole timeframe

Hi,I am facing an error during scp log export:When trying to export with a query, it only exports about 2 or 3 hours of log entries instead of the whole day. I am using the max log count parameter and it is also set on the device. Also it doesn't seem like a fix limit, sometimes it creates a .csv file with a size of 48MB, sometimes a 60 MB file ...

Nadal17 by • L0 Member
  • 5987 Views
  • 0 replies
  • 0 Likes
  • 27 Posts
  • 28 Subscriptions
Top Liked Posts
View All
Top Liked Authors
View All
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks