Received Suspicious alerts "-- MARK --"

[Karthi_N]

We are receiving suspicious alert from Palo Alto firewall on syslog server. how to stop receive these alerts. 

<46>Oct 24 05:50:14 PA-3020 -- MARK --
<46>Oct 24 06:10:14 PA-3020 -- MARK --
<46>Oct 24 06:50:14 PA-3020 -- MARK –

[JayGolf · Accepted solution]

Hi @Karthi_N ,

The "MARK" syslog messages:

MARK messages are generated when there was no message traffic to inform the receiver that the connection is still alive.

[Karthi_N]

Thanks lot. That is correct. we enabled traffic logs on Log Forwarder and above messages are cleared.