Palo Alto Networks Input

[steven.zhang]

Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question.
Don’t forget to select tags to help index your topic!

1. Describe your incident:

2. Describe your environment:

• OS Information:
  graylog version 4.2.2
  mongodb version 4.4.10
  elasticsearch version 7.16.1
  Palo Alto 9.1.11

• Package Version:

• Service logs, configurations, and environment variables:
  

  

Import 9.1json without logs to graylog server
Ask Need to build a syslog server? Or through this out-of-the-box method

3. What steps have you already taken to try and solve the problem?

4. How can the community help?

Helpful Posting Tips: Tips for Posting Questions that Get Answers [Hold down CTRL and link on link to open tips documents in a separate tab]

[tmacgbay]

@steven.zhang

Ask Need to build a syslog server

You shouldn’t need to build a separate syslog server, you can have the PaloAlto send directly to the Graylog server you put the input on.

[gsmith]

Hello

What @tmacgbay said, located here.