customised option for email alert for ISP link up or down

[HemanthV]

Hi 

I have a PA firewall, is it possible to create an email alert for ISP link up or down in PA 220 device 

[OtakarKlier]

Hello,

Just for those events, no. However you can get emails for how critical something is, such as all high and/or critical events, etc.

https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Configure-Email-Alerts-for-System...

Hope that helps.

[BPry · Accepted solution]

@HemanthV,

Actually in this case you can. You would just configure something like the following. You would just need to make two, one for matching 'Port ethernet1/1: Up' and one for 'Port ethernet1/1: Down'; replace the port with whatever port you have your ISP plugged into. 

[OtakarKlier]

Sweet! good to know!

[HemanthV]

HI 

Thanks for the response 

I need a small help if i want to filter for two ports what is the special character required or can I add with bracket  

from the above picture 

can I add like this or need to add a separate filter 

(description contains 'port ethernet1/1:Up') (description contains 'port ethernet1/1:Down') 

[BPry]

@HemanthV,

Generally I just make two entries, but I suppose you could do something like:

(description contains 'port ethernet1/1:Up') or (description contains 'port ethernet1/1:Down') and put them in the same entry perfectly fine. 

[HemanthV]

Hi BPry

I got one more option for monitoring and customer told its working 

For PBF: (eventid eq nh-down)

For Path Monitoring: (eventid eq path-monitor-failure)

Regards 

V. Hemanth

[BPry]

@HemanthV,

As long as the filter works to display the required logs in the System logs, it would work for the filter. 

[HemanthV]

Hi Bpray 

The below filter is not working