The syslog severity is set based on the log type and contents.
System Logs System logs display entries for each system event on the firewall. Each entry includes the date and time, event severity, and event description. ...
Interpret Correlated Events
Interpret Correlated Events You can view and analyze the logs generated for each correlated event in the Monitor Automated Correlation Engine Correlated Events tab. Correlated ...
Panorama System and Configuration Logs
Panorama System and Configuration Logs You can configure Panorama to send notifications when a system event or configuration change occurs. By default, Panorama records every ...
Review the Widgets in the ACC
Review the Widgets in the ACC In the ACC Threat Activity tab, check the Compromised Hosts widget and Threat Activity widget for any critical or ...
Correlation Logs The firewall logs a correlated event when the patterns and thresholds defined in a Correlation Object match the traffic patterns on your network. ...
Threat Logs Threat logs display entries when traffic matches one of the Security Profiles attached to a security rule on the firewall. Each entry includes ...
Integration with Azure Security Center
View high-priority firewall logs as security alerts on the Azure Security Center dashboard with the default Azure Security Center Log Forwarding profile. ...
Configure Syslog Monitoring
Configure Syslog Monitoring To Use Syslog for Monitoring a Palo Alto Networks firewall, create a Syslog server profile and assign it to the log settings ...
Syslog Field Descriptions
Syslog Field Descriptions The following topics list the standard fields of each log type that Palo Alto Networks firewalls can forward to an external server, ...