Hello community, this topic has been on my mind as well. I already searched the forums, but unfortunately I couldn’t quite make sense of it. Which setting do I need to configure on a VSZ 7.1.1.0.872 for the syslog server? Take a look at the image, please!
Or rather: will I then see these entries in the syslog that ends up on the Palo User-ID Agent machine in plain text? I tried a test via the Graylog server, but I don’t see these entries there.:
2026/05/08 08:09:36
204
Client disconnected
Informational
Client [Domain\wolf@10.0.0.62@38:7A:0E:D4:92:9D] disconnected from WLAN [HF-LAN] on AP [AP05@70:CA:97:08:50:60] on [b/g/n] with RSSI [42].
2026/05/08 08:09:16
236
Client Information updated
Informational
Client [Domain\wolf@10.0.0.62@38:7A:0E:D4:92:9D] IP address was updated/renewed on WLAN [HF-LAN] from AP [AP05@70:CA:97:08:50:60].
2026/05/08 08:09:16
206
Client authorization successfully
Informational
Client [Domain\wolf@10.0.0.62@38:7A:0E:D4:92:9D] of WLAN [HF-LAN] from AP [AP05@70:CA:97:08:50:60] was authorized.
2026/05/08 08:09:16
202
Client joined
Informational
Client [Domain\wolf@10.0.0.62@38:7A:0E:D4:92:9D] joined WLAN [HF-LAN] from AP [AP05@70:CA:97:08:50:60] on [b/g/n].
Why?
I hope you still have some ideas or possible solutions for me.
Thanks in adavance.
cu
Wolfgang
