System Alert: high:Syslog connection established to server

[LCMember2396]

After upgrading the PA4020 to 6.0 we started to receive email messages with subject line: SYSTEM ALERT : high : Syslog connection established to server.  Is this a new feature?  What is the purpose for this and can we prevent this email message from being sent?

[Phoenix]

Hello Enid,

The system alert "Syslog connection established to server" is an indication that the syslog profile on the PAN has the firewall and the syslog server connected. This is a message seen only once the connection is established and should not be seen frequently. As connection to the server is important in having the logs forwarded to external source the severity is HIGH. May be the severity is changed in 6.0 or its a new alert message. As you may have configured the HIGH sev to be emailed and hence you would have seen the email on this.

There may not be an option to prevent it as far as the severity is HIGH and if all this severity is set to be emailed.

Hope this answers.

Thanks

[LCMember2396]

Thanks for your quick response Phoenix.

If it was changed to severity High, would this have been indicated on the release notes?

Forgot to include, we are getting the message several times.

[Retired Member]

These messages are seen now due to new enhancements in 6.0 related to Syslog over TCP or SSL. However, the message is incorrectly being sent once every hour. That will be addressed in upcoming 6.0.1 (reference addressed issue id 60816 once 6.0.1 becomes available).

-Richard

[LCMember2396]

Thank you Richard.  Would you know when the 6.0.1 version is becoming available?

[HULK]

Hello Enid,

We are expecting to be released on or before next week.

Thanks