Panorama SYSLOG Forwarding

[Josh990]

Hi All,

I'm trying to forward Firewall Traffic & Threat logs (sent to Panorama by managed Firewalls using a Log Forwarding Profile set on Security Policy Rules) using a SYSLOG Server Profile configured under 'Panorama -> Server Profiles -> SYSLOG'.

My thinking is that sending all logs through Panorama will be easier to manage however I cannot select the SYSLOG Server Profile created within 'Panorama -> Server Profiles -> SYSLOG.' when I create a new shared Log Forwarding Profile.

Any help would be appreciated, I have read over the documentation and it references 'Device -> Server Profiles' so I assume it has to be done using a Template  - therefore each Firewall send the logs to SYSLOG using the SYSLOG Server Profile, and Panorama just manages the profile under a Template.

[Mick_Ball · Accepted solution]

@Josh990 , Hi.

I have log forwarding from Panarama to syslog, i just added a syslog server in Panorama/server profiles/syslog and then used the collector log forwarding tab in Panorama/collector groups.

[Josh990]

Thanks @Mick_Ball , this worked - I forgot to mark as the solution!