By default, the logs that get generated reside only in its local storage. However, you can use
Panorama™, Cortex Data Lake, or external services (such as a syslog server) to centrally
monitor log information by defining a Log Forwarding profile and assigning that profile
to Security, Authentication, DoS Protection, and Tunnel Inspection security rules. Log
Forwarding profiles define forwarding destinations for the following log types:
Authentication, Data Filtering, GTP, SCTP, Threat, Traffic, Tunnel, URL Filtering, and
WildFire® Submissions logs.