Forward Logs from Strata Logging Service
Focus
Focus
Strata Logging Service

Forward Logs from Strata Logging Service

Table of Contents

Forward Logs from
Strata Logging Service

Learn how to forward logs from
Strata Logging Service
to an external destination.
Where Can I Use This?
What Do I Need?
  • Prisma Access (Managed by Strata Cloud Manager)
  • Prisma Access (Managed by Panorama)
  • NGFW (PAN-OS or Panorama Managed)
  • NGFW (Managed by Strata Cloud Manager)
  • Strata Logging Service
If you need to fulfill your organization's legal compliance requirements, you can easily forward firewall logs stored in
Strata Logging Service
to external destinations. For example, you can forward logs using syslog to a SIEM for long term storage, SOC, or internal audit obligations, and forward email notifications for critical events to an email address. You can forward logs to the following SIEMs:
  • Exabeam
  • Google Chronicle
  • Microsoft Sentinel
  • Splunk HTTP Event Collector (HEC)
Strata Logging Service
can forward logs in multiple formats:
CSV, LEEF, or CEF
. For each instance of
Strata Logging Service
, you can forward logs to up to 200 syslog destinations. Use the following table to find more information about supported log formats.
Log Format
Where to find more information about the logs:
IETF Standard
Default Field Delimiter
CSV
,
LEEF
<tab>
CEF
<space>
Strata Logging Service
communicates with the receiver using TLS 1.2 and Java 8 default cipher suites (except GCM ciphers, which
Strata Logging Service
does not currently support). Upon connection,
Strata Logging Service
validates that the receiver has a certificate signed by a trusted root CA or a private CA. To complete the TLS handshake and establish the connection, the receiver must present all the certificates from the chain of trust.

Recommended For You