Tech Docs: You’ll Want to Forward This!

tech docs

The Palo Alto Networks Log Forwarding app is now available on the Cloud Services Portal! Use this app to forward your logs from the Logging Service to an external Syslog server to achieve your long-term archive, SOC, or audit compliance goals.


Log Forwarding

The Log Forwarding app allows you to forward all logs from all Logging Service log sources: Traps and Firewall (including firewall logs generated by GlobalProtect cloud service). Or you can select a specific log source and log sub types to forward. For example, you could choose to forward only Authentication, User-ID, and Threat firewall logs, but not HIP Match, Data, System, or Config logs.

Log Forwarding is included with each Logging Service instance and does not require any additional license. You simply activate the Log Forwarding app from the Cloud Services portal and then you can add as many instances as you need to forward logs from each of your Logging Service instances.

To learn more about how to get started with the Log Forwarding app now, refer to the Log Forwarding App Getting Started Guide.

As always, you can find our content on our Technical Documentation site.

Happy reading!
Your friendly Technical Documentation team

Have questions? Contact us at

4 Reader Comments

  1. Hello. Will there be the possibility to get log information by mail instead of installing a syslog server?

  2. Laralyn Melvin

    Hi Dominik,

    Thanks for your question. The Log Forwarding app currently supports forwarding logs to a Syslog destination only.

  3. Hi Laralyn, forgive what may seem a stupid question and/or missing something you may think is written up clearly elsewhere (!) but is this a service that can ingest from non-Paulo-Alto sources?

  4. Will PAN be considering cef formats for syslog integration, like on ESM and PAN Firewall?

Got something to say?

Get updates: Unit 42

Sign up to receive the latest news, cyber threat intelligence and research from Unit42

By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement.