MENU
Review the exhibit.
add log-upload syslogng parserconfig set log-upload syslogng parserconfig 0
logsource
You are asked to deploy a virtual appliance OPLP to accept syslog messages directly from the enterprise Palo Alto Networks firewall. You believe that you have configured the OPLP to accept the firewall logs, yet they are not appearing in Risk Insights. Referring to the exhibit, which parser name would be required to complete the new configuration?
35 comments · newest first
AL
Alfreda
10 months ago
I thought squid was for web logs, not firewalls!
MA
Malcom
11 months ago
Definitely not C or D, those don't fit.
AR
Arminda
11 months ago
Wait, are we sure about that? What if it's B?
WI
Wilson
11 months ago
I agree, A seems right!
NO
Noelia
11 months ago
Pretty sure it's A, panw-syslog.
CA
Carma
12 months ago
I have a vague memory of "squid" being related to web proxies, so I don't think that's the right choice here.
HU
Huey
12 months ago
I practiced a similar question where we had to identify the correct parser for a different vendor. I think "custom-csv" was for CSV formats, not syslog.
IL
Ilona
12 months ago
I'm not entirely sure, but I feel like "sfwder" might be related to firewall logs too.
LO
Lore
1 year ago
I remember we discussed syslog parsers in class, and I think the "panw-syslog" parser is specifically for Palo Alto logs.
ST
Steffanie
1 year ago
I feel pretty confident about this one. The exhibit mentions the OPLP appliance, and the options include a "panw-syslog" parser, which seems like the logical choice to accept the Palo Alto Networks firewall logs.
TY
Ty
1 year ago
I'm not entirely sure about this one. I'll need to double-check the exhibit and options to make sure I'm selecting the right parser name. Hopefully, I can eliminate some of the choices and narrow it down.
CA
Casandra
1 year ago
Okay, based on the information provided, I think the parser name I need to use is "panw-syslog". That seems to be the option that best matches the Palo Alto Networks firewall logs.
FA
Fatima
1 year ago
Hmm, I'm a bit confused by the terminology here. I'll need to make sure I understand what a "parser name" is and how it relates to the OPLP configuration.
WH
Whitley
1 year ago
This looks like a tricky configuration question. I'll need to carefully review the exhibit and options to determine the correct parser name.
JA
Jaime
1 year ago
Hmm, I'm not sure about this one. I'll have to think it through carefully. Defining space-time relationships, teaching visually, and providing time to learn all seem like good techniques for slower learners.
VI
Virgilio
1 year ago
I'm not entirely confident, but I think automating all remaining tests might be unrealistic at this stage. We don't have enough time for that.
RO
Rory
1 year ago
I think it's by defining a user-specified decode-as, but I'm not 100% confident. I'll make sure to read the question carefully before answering.
KI
Kirk
1 year ago
Wait, did they just ask me to configure a 'panw-syslog' parser? Sounds like they're trying to get me to do some 'pan-handling' with the firewall logs!
SA
Santos
1 year ago
C) custom-csv
NO
Norah
1 year ago
B) sfwder
HU
Huey
1 year ago
A) panw-syslog
PE
Penney
1 year ago
sfwder? What is this, a new dance move? I'll stick with the PANW-syslog parser and hope it doesn't require any fancy footwork to get it working.
SH
Shawnta
1 year ago
Squid? Really? That's for web proxy logs, not firewall logs. I think I'll go with the PANW-syslog option and call it a day.
CE
Cecilia
1 year ago
User 3: Yeah, PANW-syslog is the way to go. Let's go with that.
DE
Devora
1 year ago
User 2: I think PANW-syslog would be the best choice for this configuration.
LU
Lucy
1 year ago
User 1: I agree, Squid is definitely not the right option for firewall logs.
SO
Sol
1 year ago
Hmm, custom-csv? That sounds a bit too much work. I'd rather go with the pre-built PANW-syslog parser and avoid the headache of creating a custom configuration.
EL
Elly
1 year ago
The PANW-syslog parser seems like the logical choice here, as it is specifically designed to handle Palo Alto Networks firewall logs. Let's hope this helps me get those logs flowing into Risk Insights!
TW
Twila
1 year ago
Thanks for the advice. I will give it a try with the panw-syslog parser.
BE
Beata
1 year ago
Make sure to double check your configuration with the OPLP.
EL
Eloisa
1 year ago
Yes, I agree. The PANW-syslog parser is designed for Palo Alto Networks firewall logs.
TR
Truman
1 year ago
I think the correct parser name would be panw-syslog.
BA
Barbra
2 years ago
I see your point, but I still think panw-syslog is the right choice based on the exhibit.
JA
Jacqueline
2 years ago
I disagree, I believe the correct parser name is custom-csv.
BA
Barbra
2 years ago
I think the parser name required would be panw-syslog.