block-url threat level

[oshcomp]

I am trying to set up notification for blocked urls.  I can see block-url syslog messages when I set log forwarding to log severity level informational.  Is there a way to modify the threat level for blocked urls?  I would like to use a higher threat level as an indication of when to send an email alert.

Thanks.

[dyang · Accepted solution]

You cannot modify the severity level of any of the syslog messages, as those are pre-set. 

[mikand]

However you can file this as a feature request through your local sales engineer.

I think it could be handy to get a list of various types of messages where you could select "default" or manually override into one of the severity levels available.

This way one could "reclassify" so block-url messages are sent as "low" instead of "informational" (or whatever the names are for the severities).