syslog query

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

syslog query

L3 Networker

Hi team,

 

We have 1000+ security policies and 2 Syslog servers.

 

can we enable two Syslog profiles simultaneously on the same policy
 
Also, how can we enable the Syslog profile in the bulk policy  or in 1000+ policy we need to add the Syslog profile manually
 
Kindly put your valuable inputs on this.
 
Regards,
Vishnu
 
2 REPLIES 2

L2 Linker

Hi Vishnu, 

 

You enable log forwarding on the policies and you can list two syslog servers on the same log forwarding profile. In regards to bulk changes you can use Expedition , which easily allows multi rule edits. If expedition is not possible to be deployed you can use another API tool can PAN configurator to make changes on thousands of rules quick style. 

 

https://live.paloaltonetworks.com/t5/api-articles/pan-configurator-scripting-library-and-utilities/t...

https://live.paloaltonetworks.com/t5/expedition/ct-p/migration_tool

 

 

cheers

 

Rob 

L3 Networker

Please be aware that pan-configurator project was replaced with PAN-OS-PHP;

https://live.paloaltonetworks.com/t5/api-articles/pan-os-php-scripting-library-and-utilities/ta-p/40...
https://github.com/PaloAltoNetworks/pan-os-php

PAN-OS-PHP had the same but already improved and extended feature set compare to pan-configurator.

regards
Sven

  • 1756 Views
  • 2 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!