How to Forward Critical System Log Events to a Syslog Server

Overview

This document describes how to forward critical system log events from the Palo Alto Networks device to a syslog server:

Steps

1. Create a syslog server profile under Device > Server Profiles > Syslog. Specify the name, IP, and destination port:
   
2. Under Device > Log Settings > System, select the critical severity:
   
3. Select the syslog profile created in step 1 and click OK:
   
4. Commit the changes

All critical system log events will now be forwarded to the syslog server.

owner: jteetsel