flightnomad.blogg.se

,$ receive_time,$serial,$type,$subtype,$time_generated,$srcuser,$vsys,$machinename,$os,$src,$matchname,$repeatcnt,$matchtype,$seqno,$actionflags,$dg_hier_level_1,$dg_hier_level_2,$dg_hier_level_3,$dg_hier_level_4,$vsys_name,$device_name,$vsys_id,$srcipv6,$hostid ,$receive_time,$serial,$type,$subtype,$time_generated,$src,$dst,$natsrc,$natdst,$rule,$srcuser,$dstuser,$app,$vsys,$from,$to,$inbound_if,$outbound_if,$logset,$sessionid,$repeatcnt,$sport,$dport,$natsport,$natdport,$flags,$proto,$action,$misc,$threatid,$category,$severity,$direction,$seqno,$actionflags,$srcloc,$dstloc,$contenttype,$pcap_id,$filedigest,$cloud,$url_idx,$user_agent,$filetype,$xff,$referer,$sender,$subject,$recipient,$reportid,$dg_hier_level_1,$dg_hier_level_2,$dg_hier_level_3,$dg_hier_level_4,$vsys_name,$device_name,$src_uuid,$dst_uuid,$http_method,$tunnel_id/$imsi,$monitortag/$imei,$parent_session_id,$parent_start_time,$tunnel,$thr_category,$contentver,$assoc_id,$ppid,$http_headers,$url_category_list,$rule_uuid,$http2_connection ,$receive_time,$serial,$type,$subtype,$time_generated,$vsys,$eventid,$object,$module,$severity,$opaque,$seqno,$actionflags,$dg_hier_level_1,$dg_hier_level_2,$dg_hier_level_3,$dg_hier_level_4,$vsys_name,$device_name ,$receive_time,$serial,$type,$subtype,$time_generated,$host,$vsys,$cmd,$admin,$client,$result,$path,$before-change-detail,$after-change-detail,$seqno,$actionflags,$dg_hier_level_1,$dg_hier_level_2,$dg_hier_level_3,$dg_hier_level_4,$vsys_name,$device_name In the Syslog Server Profile window, select the Custom Log Format tab, and use the following custom format for the following log types:.

In the Servers window, specify the following information:.In the Syslog Server Profile window, select the Servers tab and click Add.Click Add at the bottom of the screen and provide endpoint details and a profile name, such as Sumo_Logs_Profile01.Select Device tab > Server Profiles > Syslog.

Login to the Palo Alto Networks Web interface as an administrative user.To create a server profile specifying the log destination, do the following:

This will be the host name, port and protocol (TLS) of the Sumo Logic Cloud Syslog source. In this step you create a server profile where you can define the log destination.