Device > Server Profiles

Device > Server Profiles > Syslog Panorama > Server Profiles > Syslog

To forward System, Config, Traffic, Threat, HIP Match, or Correlation logs as syslog messages, define one or more syslog server profiles by clicking Add and specifying the New Syslog Server fields.

To select the syslog server profile for System, Config, HIP Match, and Correlation logs, see Device > Log Settings.

To select the syslog server profile for Traffic, Threat, and WildFire logs, see Objects > Log Forwarding.

You cannot delete a server profile that the firewall uses in any System or Config log settings or Log Forwarding profile.

Syslog Server Setting	Description
Name	Enter a name for the syslog profile (up to 31 characters). The name is case-sensitive and must be unique. Use only letters, numbers, spaces, hyphens, and underscores.
Location	Select the scope in which the profile is available. In the context of a firewall that has more than one virtual system (vsys), select a vsys or select Shared (all virtual systems). In any other context, you can’t select the Location ; its value is predefined as Shared (for firewalls) or as Panorama. After you save the profile, you can’t change its Location.
Servers Tab
Name	Click Add and enter a name for the syslog server (up to 31 characters). The name is case-sensitive and must be unique. Use only letters, numbers, spaces, hyphens, and underscores.
Server	Enter the IP address of the syslog server.
Transport	Select whether to transport the syslog messages over UDP, TCP, or SSL.
Port	Enter the port number of the syslog server (the standard port for UDP is 514; the standard port for SSL is 6514; for TCP you must specify a port number).
Format	Specify the syslog format to use— BSD (the default) or IETF.
Facility	Select one of the Syslog standard values. Select the value that maps to how your Syslog server uses the facility field to manage messages. For details on the facility field, see RFC 3164 (BSD format) or RFC 5424 (IETF format).
Custom Log Format Tab
Log Type	Click the log type to open a dialog box that allows you to specify a custom log format. In the dialog box, click a field to add it to the Log Format area. Other text strings can be edited directly in the Log Format area. Click OK to save the settings. View a description of each field that can be used for custom logs . For details on the fields that can be used for custom logs, see Device > Server Profiles > Email.
Escaping	Specify escape sequences. Escaped characters is a list of all the characters to be escaped without spaces.

Document:PAN-OS® Web Interface Reference Guide

Device > Server Profiles > Syslog

Related Documentation

Document:PAN-OS® Web Interface Reference Guide

Device > Server Profiles > Syslog

Related Documentation

Configure Syslog Monitoring

Device > Server Profiles > Email

Configure User-ID to Receive User Mappings from a Syslog Sender

Configure Log Forwarding from Panorama to External Destinations

Configure Log Forwarding

Configure Email Alerts

Syslog Field Descriptions

Device > User Identification > User Mapping

Configure Log Forwarding to Panorama

Network > Network Profiles > LLDP Profile