cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Who Me Too'd this topic

Sending Before Change and After Change details in Panorama to Syslog

L1 Bithead

I've been testing the logging of change events to a syslog server from Panorama.  Syslog events indicate a change made by a person and the general section of the change without giving any specific details of what was changed.  Looking in Panorama in the Monitor tab I can see the change event and some details that are sent to syslog, but the details of the configuration change as displayed in the Before Change and After Change fields all missing.  Is there a way to include those fields as part of a syslog event when a configuration item is changed?

Here is the syslog event as recorded by Wireshark.  The time, command, username, IP of system making the change, Result, Configuration Path and Sequence No. all show up in the syslog entry.  However the details of the change are not.

Capture2.JPG

The information I want sent in the syslog is highlighted below.

Capture1.JPG

Does anyone know how to include the Before/After Change details as part of the syslog event?  Remember this is on Panorama.

Thanks!

Sc

Who Me Too'd this topic