ThreatLog forwarding doesnt work

[bhavin_bhatt]

Hi All,

I have configured the PaloAlto to email me threatn  logs for medium , high and critical alerts, but it seems to email me only medium threat alerts, how do i fix this 😞

Please find attached my log forwarding profile.

My email profile is configured fine, as i can receive system alert emails etc, but only with threat alerts, all i get is medium, even though in the threat logs there is loads of high and critical alerts.

Cheers

Bhav

[mrajdev]

Hi Bhav,

Can you please open up a support case for this issue.

Thanks

[chrkli193]

Hi, we have the same problem with PAN-OS 4.1.4 on an PA-2050.

But we don't get any Threat Log by mail.

With PAN-OS 4.1.3 it worked.

Is this a known issue?

Regards

Christoph

[emr_1]

This issue should be fixed in v4.1.5.

From RN of v4.1.5

========

37608 –  Threat logs not being forwarded to the syslog server, although other logs worked
fine. Issue due to a problem with the log forwarding queue for threat logs.

========

Regards,

Emr

[chrkli193]

Thanks I will try this.

I read the RN of 4.1.5 but there was nothing with mail profile an Threat Log.

[emr_1]

On my test with PA-500 v4.1.5.

Alert-mail is working fine.

Hopefully your PA2000 will work fine too.

[chrkli193]

I installed the 4.1.5 and now it works.

Thank you!