Stopping email alert for Syslog related Logs.

[Gururaj]

How stop email alerts for syslog related logs? For example Email alert is generated for every one hour that syslog server is active.

Note: The log severity level for email alert is configured for high and it should be changed.

[Rham]

Hello,

I do not know if you mean that, but the hourly message is a bug in 6.0.0.

60816

Following an upgrade to PAN-OS 6.0.0, syslog connection status warnings for all defined syslog connections appeared in the system log every hour and were categorized as critical. This was caused by a scheduled hourly rotation of the syslog-ng log file, during which the syslog-ng daemon would restart. This issue has been fixed by adding a condition to the log file rotation process requiring the log file to be 10 MB or more and the connection status warning will only be seen once every few months.

There are also some other comments concerning this

Re: System Alert: high:Syslog connection established to server

SYSTEM ALERT : high : Syslog connection established to server

[Gururaj]

But i am getting this alert email in the PAN OS version is 5.0.9. Is the same issue expected in this version also?

[Gururaj]

Hi All,

After updating PAN OS to 6.0.1 also the email alert for syslog connectivity is not resolved yet.

Getting email alert after commit, that syslog server connection established.