Use the log ingestion profile to enable Panorama to
receive logs from external sources. In PAN-OS 8.0.0, Panorama (in
Panorama mode) can serve as a Syslog receiver that can ingest logs
from the Traps ESM server using Syslog. Support for new external
log sources and the updates for newer Traps ESM versions will be
pushed through content updates.
To enable log ingestion, you must configure Panorama as a Syslog
receiver on the Traps ESM server, define a log ingestion profile
on Panorama and attach the log ingestion profile to a Log Collector
To add a new external Syslog ingestion profile,
profile and configure the settings as described in the following
Enter the name for the external Syslog ingestion
profile. You can add up to 255 profiles.
Enter the name or IP address of the external
sources that will send logs. You can add up to 4 sources within
Enter the port on which Panorama will be
accessible over the network and will use to communicate and listen
For Traps ESM, select a value between the range of 23000-23999.
You must configure the same port number on the Traps ESM to enable communication
between Panorama and the ESM.