URL log forwarding to syslog servers, but not all informational threat logs.

[Premchand]

we need to forward url filtering logs from PaloAlto to syslog server ( similarly from Panorama to syslog server.)

To do this we need to to forward the Threat "Informational" logs ( generally url filtering logs are part of threat "informational logs ).

But we do not want to forward all "informational" threat logs to syslog servers as it will add lot of space to the syslog server.

So is there any way we can only forward the url logs, but not all informational threat logs.

 Pan OS version : 7.1.7

[reaper · Accepted solution]

if you're willing to upgrade to PAN-OS 8.0 you can add filtering to your log forwarding profile