Inquiry Regarding CEF Configuration Guide and Custom Log Format Variables for PAN‑OS 11

[T.Shimada291937]

Attention: Global TPM team

Question ①: Regarding the CEF Formatting Guide for PAN-OS 11
The following link contains CEF formatting guides for various versions of PAN-OS, but I cannot find a guide for PAN-OS 11.

https://docs.paloaltonetworks.com/resources/cef

Is it correct to understand that the CEF configuration guide for PAN-OS 11 is not currently published?

Question ②: Regarding the List of Variables that Can Be Specified in Custom Log Formats
Regarding the variable fields that can be used when specifying a custom log format,

Are there any official documents or commands that can be referenced without using the GUI?

The GUI displays a list of variables, but I would like to know if there are any documents that can be used to check this information.
If possible, please also let me know if there are any documents that show the correspondence between variable names and the actual log field names that are output.

Best Regards,

[ozheng · Accepted solution]

Hello @T.Shimada291937 

(1) If it is not available, it is not published. But the functionality (custom format) is still working, so ... it should be not difficult to just do the same.
I suspect the only difference between the doc in PAN-OS 10.x and 11 will just be an update with the new fields.

(2) You can google "xxxx log fields"

for instance: https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/monitoring/use-syslog-for-monitoring/sysl...

Olivier