Palo Alto Networks

Logs Collected

The information being sent to Google Stackdriver Logging is collected from Palo Alto

• General Logs
• System Logs
• Threat Logs
• Traffic Logs
• User Error Logs
• User Info Logs
  Below are examples of some of these being displayed in Google Stackdriver Logging using the BindPlane Log Agent.

Log Collection Setup

Follow these steps to setup log collection from Palo Alto
##Pre-requisites

• Bind Address for FluentD to listen on
• Port the agent will listen for logs on.

Configure a Palo Alto Source

1. Install the BindPlane Log Agent on the host system.
2. Login to BindPlane and select the Logs tab.

3. Select the Sources tab.

4. In the top-right portion of the screen, click on the Add Source Configuration button

5. Choose Palo Alto
6. Fill out the Palo Alto log configuration options.