Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Live
- ›
- About Graeme_Riddell
About Graeme_Riddell
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Online
8Posts
0Likes
0Solutions
Jun 05, 2020Last Visited
User
Activity
User
Profile
Latest posts by Graeme_Riddell
| Subject | Views | Posted |
|---|---|---|
| 224 | 2 weeks ago | |
| 280 | 2 weeks ago | |
| 389 | 3 weeks ago | |
| 878 | 3 weeks ago | |
| 227 | 04-09-2020 08:04 AM |
User Badges
Public Statistics
| Date Registered | 01-29-2019 01:25 AM |
| Date Last Visited | 3 hours ago |
| Total Messages Posted | 8 |
2 weeks ago
Thanks for the reply, we are also using the Log Forwarding App from the Hub Portal. Also got it configured in Cortex XDR console also. Thanks, Graeme
... View more
2 weeks ago
Hello David, I would prefer LEEF as I am trying to also get the Paloalto Networks App working in QRadar and that stipulates that it requires LEEF. Although I am failing miserably on that front aslo, but I dont appear to be alone on that front according to what I have read. Thanks< Graeme
... View more
3 weeks ago
Does anybody have and experience to share on this setup please? Thanks, Graeme
... View more
3 weeks ago
We are having the same issue as well no data shown in app which is really disappointing.
... View more
04-09-2020
08:04 AM
Does this Article relate to PAN-OS version 9 ? https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClEcCAK As I am trying to get feeds into the Palalto Networks App in IBM QRadar and I believe these "LEEF" formats are required but the article only states upto PAN-OS 8.0 and 8.1from what I have read. Many Thanks, Graeme
... View more
03-20-2020
05:09 AM
Completely agree with you. But I have no budget to pay up the EPS count addition for our SIEM.
... View more
03-19-2020
02:41 AM
Thanks for the reply. That's is exactly where I ma , trying to configure the correct filter for "globalprotect" user authentications and trying to create the correct filter to exclude those logs from being forwarded, as yet I have failed miserably on constructing the correct filter. Many Thanks, Graeme
... View more
03-18-2020
09:07 AM
I am trying to find the correct configuration to prevent or exclude globalprotect logs from forwarding to our SIEM. I have filtered the type of event "globalprotect" but dont seem to be able to configure this as a filter in my log forwarding on my appliance. The above log entry is from "System" but this is not listed as a log type to choose from for forwarding. As expected with increased home working our Events Per Second count has rapidly increased and I would like to exclude this type of traffic from forwarding to SIEM but keep what I originally had. Any advise or tips very much welcome. Kind regards, Graeme
... View more
Contact Me
| Online Status |
Online
|
| Date Last Visited |
3 hours ago
|
Latest Tags
No tags yet
Latest Blogs
Latest Posts
Copyright 2007 - 2020 - Palo Alto Networks
