set a pecific logforwarding object by default when new policy rule is created

[jogyulas]

Dear Guys,

Maybe my question is simple but I haven't found answer in google so sorry.

Is it possible to set automatically a specific  logforwarding object to a new policy rule? With this avoiding to be forgetten this setting by anyone who add a new policy rule.

Thank you in advance,

[OtakarKlier]

Hello,

You can setup a Log Setting filter.

Device tab -> Log Settings

Then set a Configuration filter to send an email.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClGlCAK

Hope this helps.

[PavelK · Accepted solution]

Thank you for posting question @jogyulas 

if you name log forwarding profile as: default it will be automatically added to security rule. Please refer to below link step 2:

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/monitoring/configure-log-forwarding

Kind Regards

Pavel

[jogyulas]

Thank you guys for your answers. Pavel's post gave me the solution that I was looking for.

Best Regards,