09-15-2021 06:51 AM
Hello, we have configured panorama 10.0.5 to send filtered system logs to email and it works but only for logs generated on panorama.
Log filter shows also logs from managed firewalls but thoose logs are not sended and i don't know why.
Did anybody had succed sending system logs collected on panorama via email eg. admin login events ?
regards,
Tomek
09-15-2021 11:20 PM
Thank you for your answer. Problem solved. We configured it in wrong place. Log settings are related only to panorama although filter logs shows data from palos also.
After configuration log collector forwarding in collector groups everything works as intended.
regards,
Tomek
09-15-2021 12:53 PM
In your panorama tab you should be able to configure an email profile, for mine I am using smtp.gmail.com and have a bogus *****PRA@gmail.com email address that the alerts are sent from.
It sounds like you configured system alerts for just the panorama, you will want the same profile on the NGFWs. I suppose this would be a good time to ask as this may change the answer, are you log forwarding from the NGFWs to your PRA?
09-15-2021 11:20 PM
Thank you for your answer. Problem solved. We configured it in wrong place. Log settings are related only to panorama although filter logs shows data from palos also.
After configuration log collector forwarding in collector groups everything works as intended.
regards,
Tomek
09-16-2021 05:09 AM
Most excellent! Cheers
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
