Flood event threat logs

[SurajN]

In this flood event count is showing, please what is the explanation of this Colum in threat logs report. 

[MP18]

@SurajN 

Did you have DDos Protection enabled?

Seems you have that configured and now getting flooded and PA  is recording them as  threat with a Severity rating of critical under Threat logs.

Regards

Please open TAC case ASAP.

[SurajN]

Thank you for update. but i want explanation of count column .whta extactly showing in that column signature match packet or drop packet .so I'm little bit confused.

[BPry]

@SurajN,

The count is mapped to the repeat_count in the context that you are displaying, which is how the firewall essentially groups log files for flood alerts. So instead of getting 154 logs for your first entry, it'll only generate 1 log entry and the repeat count will tell you it was triggered for 154 sessions.