Need sample logs for all Next Generation Firewall log events for Integration Testing

[suresh.nalamolu]

Hi team,

I'm currently working on integrating log analysis and would like to collect sample log events for all Next Generation Firewall log event types

Is there a way to access a reference dataset or sample payloads for each log event type for testing and validation purposes?

Thanks in advance! 

[OtakarKlier]

Hello,

I'm have not seen one. I do alert on High and Critical events. Alerting by criticality rather than an actual event. Some events I do create specific alerts on however.

Is this for a SIEM or from the PAN?

Regards,

[suresh.nalamolu]

Thanks for your response.

Just to clarify, I’m looking for logs for both:

• SIEM Integration: We’re testing alert rules and correlation based on Palo Alto Networks (PAN) logs. This includes high and critical severity events, along with specific log types like threat, traffic, config, and system logs.

• Direct from PAN: We’re also reviewing alerting capabilities directly from the PAN platform, so we need log samples to help with testing, enrichment, and validation.

If you could share sample logs (sanitized if needed) for key PAN log types like THREAT, TRAFFIC, SYSTEM, CONFIG, HIPMATCH, and CORRELATION, that would be very helpful for our integration work.

Thanks again

[murali438]

I'm not sure about the platform you are using but I found this

PaloAltoNetworks/Splunk-App-Data-Generator: Sample data generator for the Splunk for Palo Alto Netwo...

[suresh.nalamolu]

Any update

[suresh.nalamolu]

can you provide sample schema for these THREAT, TRAFFIC, SYSTEM, CONFIG, HIPMATCH, and CORRELATION in Json format.

[ozheng]

Hello @suresh.nalamolu 

You can find all the fields for each type of logs in the documentation.
https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-admin/monitoring/use-syslog-for-monitoring/sysl... 

Olivier