As of PAN-OS 8.1.2, Palo Alto
Networks
critical content update alerts are
logged as system log entries with the Type
dynamic-updates
and
the Event
palo-alto-networks-message
. You
can use the following filter to view or set up log forwarding for
these type of log entries:
(subtype eq dynamic-updates)
and (eventid eq palo-alto-networks-message)
.