Email notification recurrence add

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Email notification recurrence add

L4 Transporter

Hello Team,

                 I have panos 11.2.3-h3, I am managing to creat an email notification when a specific event occure.

I made this by creating the report in "Manage Custom Report -> then creating the required querry".

my issue that is now I need configure an ocurence when is about "last legs within last 5 minutes" and run the report as task every 5 minutes too.

the issue that when creating the custom report, the report cant be run in durations of less than 15 mins nd also the email scheduler occurence cant be less than a Day.

 

Any suggested ways for how to add my custom occurence period?

TIA

MR
2 REPLIES 2

Cyber Elite
Cyber Elite

Hello,

You can create a custom Log Setting Filter alert for this type of event. However you could be overwhelmed with the amount of emails.

https://docs.paloaltonetworks.com/pan-os/11-2/pan-os-web-interface-help/device/device-log-settings/s...

 

Regards,

 

 

Cyber Elite
Cyber Elite

@MRamadanAHafiez,

Outside of what @OtakarKlier already mentioned, you can script this through the API easily enough. The process looks a bit like this:

1. Run the custom report

api?type=report&async=yes&reporttype=custom&reportname=Failed_GP_Login

2. Collect the Job ID from the submission since that's what you'll need to monitor to see if the report has finished. Then just grab the report

api?type=op&cmd=<show><report><id>' + str(job_id) + '</id></report></show>

3. Parse the report and collect the information that you require for the email report. I won't go into detail on this since it'll vary depending on the language being used and what you're attempting to do.

  • 395 Views
  • 2 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!