You can configure Panorama to send notifications when
a system event or configuration change occurs. By default, Panorama
records every configuration change in the Config logs. In the System
logs, each event has a severity level to indicate its urgency and
impact. When you Configure Log Forwarding from Panorama to External Destinations,
you can forward all System and Config logs or filter the logs based
on attributes such as the receive time or severity level (System
logs only). The following table summarizes the severity levels for
Panorama does not support querying configuration logs in
or when monitoring configuration
using the filters:
Indicates a failure and the need for immediate
attention, such as a hardware failure, including high availability
(HA) failover and link failures.
Serious issues that will impair the operation
of the system, including disconnection of a Log Collector or a commit
Mid-level notifications, such as Antivirus
package upgrades, or a Collector Group configuration push.
Minor severity notifications, such as user
Notification events such as log in or log
out, any configuration change, authentication success and failure
notifications, commit success, and all other events that the other
severity levels don’t cover.