03-13-2018 05:59 AM
Hi All,
We had an incident with one of our clients where the one of the Ethernet port on Palo Alto went down and the log severity which was reflected on PA was "informational", whereas client want this to be in a severe level like "high" or "critical"
Please let us know if the severity level can be changed to critical for link down on Palo Alto.
I found this document where we can see that for port down the Severity is showing "Informational".
https://live.paloaltonetworks.com/t5/Configuration-Articles/SNMP-Trap-for-Port-or-Link-status/ta-p/5...
Please confirm whether the severity of ethernet port down will be Informational only.
Regards,
Hiren
03-13-2018 06:17 AM
The serverity level is not customizable to the best of my knowledge. I would recommend enabling Link Monitoring or setting up a 'Log Settings' filter specifically for alerting on interface events.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
