The syslog severity is set based on the log type and contents.
System Logs System logs display entries for each system event on the firewall. Each entry includes the date and time, event severity, and event description. ...
Interpret Correlated Events
Interpret Correlated Events You can view and analyze the logs generated for each correlated event in the Monitor Automated Correlation Engine Correlated Events tab. Correlated ...
Panorama System and Configuration Logs
Panorama System and Configuration Logs You can configure Panorama to send notifications when a system event or configuration change occurs. By default, Panorama records every ...
Review the Widgets in the ACC
Review the Widgets in the ACC In the ACC Threat Activity tab, check the Compromised Hosts widget and Threat Activity widget for any critical or ...
Correlation Logs The firewall logs a correlated event when the patterns and thresholds defined in a Correlation Object match the traffic patterns on your network. ...
Transition Vulnerability Protection Profiles Safely to Best Practices
Apply Vulnerability Protection profiles to allow rules to protect against malware exploits and vulnerabilities without risking application availability. ...
Transition Anti-Spyware Profiles Safely to Best Practices
Apply Anti-Spyware profiles to allow rules to protect against command and control attacks without risking application availability. ...
Threat Logs Threat logs display entries when traffic matches one of the Security Profiles attached to a security rule on the firewall. Each entry includes ...
Configure Syslog Monitoring
Configure Syslog Monitoring To Use Syslog for Monitoring a Palo Alto Networks firewall, create a Syslog server profile and assign it to the log settings ...