NIPS

[Kiruba007]

How do we identify NIPS logs among Paloalto Firewall logs ?

[PavelK]

Hello @Kiruba007

thanks for post.

Would it be possible to add more context?

If you are looking into logs directly in Firewall / Panorama, then you can find them under: Monitor > Logs > Threat. If you are referring to logs in SIEM, then this would depend how you ingest logs. You can separate threat logs in CEF while ingesting: https://docs.paloaltonetworks.com/resources/cef.

Kind Regards

Pavel