logging for external dynamic lists?

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

logging for external dynamic lists?

L1 Bithead

Is there any logging for EDLs? I am looking for things like:

  • a change in the EDL was detected
  • errors in the EDL (invalid IPs or URLs)
  • EDL is too large / too many entries

It would be great if I could alert on any of these.

 

3 REPLIES 3

L4 Transporter

Hi @rjfoster ,

 

You can refer the system logs to check the status of EDL refresh, but it will not give the exact error if IPs or URLs are invalid in EDL. 

Regarding teh EDL is too large / too many entries, you will see the error in system logs.

You can refer the below doc related to formatting guidelines.

 

https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/policy/use-an-external-dynamic-list-in-po...

 

Best Regards,

Mohammad Talib

 



Best Regards,
Mohammad Talib

Cyber Elite
Cyber Elite

Hello @rjfoster

 

only to expand on answer given by @mshekh. Once you find EDL related errors in System log you want to get alerts, you can set up custom alerting from: Device > Log Settings > System > Add > Filter Builder:

 

PavelK_0-1736943045427.png

Contains 'EDL' is a bit too generic and will be noisy. I am using it here only as an example 🙂

 

Kind Regards

Pavel

   

Help the community: Like helpful comments and mark solutions.

Thanks for the info. I was hoping there was a place to get more details. In particular, if a entry is bad, the firewall should provide details. Logging seems to be a strength for traffic and security--I was hoping system-level logging would be as detailed.

-r

  • 442 Views
  • 3 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!