Forward log to two syslog server concorrently

[Register_Security]

Hi there,

My system have two syslog server. I want configure Palo Alto forward log message ( System log and Traffic log) to two syslog server concurrently.

I don't know where to configure. Please help me ?

[panos]

Hi,

1- from Device - Server Profiles - Syslog

Create a profile and add 2 syslog servers here (inside the same profile )

2- go to Objects- Log forwarding and Create an object here (choose which logs will be forwarded - choose the profile you created)

3- For every security rule you want to forward its log go and choose the log forwarding profile (in Policies - Security - inside the rule Actions - Log forwarding )

4- For system or config logs you have to choose the syslog object from Device - Log settings - system/Config

[shasnain]

[Register_Security]

Thanks in advance !