# Can't receive any logs from Palo Alto **URL:** \ **Category:** Graylog Central (peer support)\ **Tags:** pipeline-rules\ **Created:** [March 18, 2021, 9:54am UTC](https://community.graylog.org/t/cant-receive-any-logs-from-palo-alto/19165 "2021-03-18T09:54:52Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![Lotfy](https://avatars.discourse-cdn.com/v4/letter/l/a183cd/32.png) [@Lotfy](https://community.graylog.org/u/Lotfy)\ **Post date:** [March 18, 2021, 9:54am UTC](https://community.graylog.org/t/cant-receive-any-logs-from-palo-alto/19165/1 "2021-03-18T09:54:52Z")
I defined a syslog UDP Input with Port 5241 On gray log , and then on PaloAlto i defined the name and IP of my graylog server and set the same port 5241 , and setup a log forwarding rule but still not receiving any thing on graylog input Any help? ---
**Author:** ![Lotfy](https://avatars.discourse-cdn.com/v4/letter/l/a183cd/32.png) [@Lotfy](https://community.graylog.org/u/Lotfy)\ **Post date:** [March 18, 2021, 9:57am UTC](https://community.graylog.org/t/cant-receive-any-logs-from-palo-alto/19165/2 "2021-03-18T09:57:58Z")
![paloalto](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/8/8b3288f655c01560fa9b672213ccc629f1aabc67.jpeg) ---
**Author:** ![dickinsonzach](https://avatars.discourse-cdn.com/v4/letter/d/e19b73/32.png) [@dickinsonzach](https://community.graylog.org/u/dickinsonzach)\ **Post date:** [March 18, 2021, 3:48pm UTC](https://community.graylog.org/t/cant-receive-any-logs-from-palo-alto/19165/3 "2021-03-18T15:48:09Z")
Good morning, instead of Syslog try Raw to see if you get data. Thank you, Zach. ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/3/3b50d4e5933526d458b21f95798accbaff1cd495.png) ---
**Author:** ![Lotfy](https://avatars.discourse-cdn.com/v4/letter/l/a183cd/32.png) [@Lotfy](https://community.graylog.org/u/Lotfy)\ **Post date:** [March 21, 2021, 8:40am UTC](https://community.graylog.org/t/cant-receive-any-logs-from-palo-alto/19165/4 "2021-03-21T08:40:55Z")
Thanks!!! i changed it to Raw and received some data the problem is it’s like this with no useful Info [Palo|690x194](https://community.graylog.org/uploads/short-url/wSj9c1E8lFJaUYBk3MlIjBhysyT.jpeg) ---
**Author:** ![dickinsonzach](https://avatars.discourse-cdn.com/v4/letter/d/e19b73/32.png) [@dickinsonzach](https://community.graylog.org/u/dickinsonzach)\ **Post date:** [March 21, 2021, 1:47pm UTC](https://community.graylog.org/t/cant-receive-any-logs-from-palo-alto/19165/5 "2021-03-21T13:47:24Z")
Good morning, at least in my case, I had to use Raw for a source that did not support one of the RFCs of Syslog that Graylog supports. RFC 5424 and RFC 3164 from [Ingest syslog — Graylog 4.0.0 documentation](https://docs.graylog.org/en/4.0/pages/sending/syslog.html) I was not able to change how my source sent the info, maybe you will have better luck. To make it usable I would have had to do something with rules, pipelines, streams, etc… I did not put that time into it. I just kept it at Raw and created a few alerts to pull out items of interest. Thank you, Zach. ---
**Author:** ![Lotfy](https://avatars.discourse-cdn.com/v4/letter/l/a183cd/32.png) [@Lotfy](https://community.graylog.org/u/Lotfy)\ **Post date:** [March 22, 2021, 7:30am UTC](https://community.graylog.org/t/cant-receive-any-logs-from-palo-alto/19165/6 "2021-03-22T07:30:46Z")
ok Dickinsonzach, Thanks for your time and consideration ---
**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\ **Post date:** [April 5, 2021, 7:30am UTC](https://community.graylog.org/t/cant-receive-any-logs-from-palo-alto/19165/7 "2021-04-05T07:30:46Z")
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.