Is it possible to exclude a particular IP from forwarding logs to the syslog server, that too particularly deny logs for that IP

[PavelK]

Hello @Kandarp_Desai

you should be able to accomplish this by placing a filter. Could you navigate to: Panorama > Collector Groups > [Collector Group Name] > Collector Log Forwarding > Traffic > [Name of log forwarding profile], then put into filter field what you want to exclude. For example send to syslog server everything except deny log for ip address:

 !(addr in X.X.X.X) and (action eq deny)

Kind Regards

Pavel