Select DeviceServer ProfilesSyslog or PanoramaServer ProfilesSyslog to configure a server profile for forwarding logs as email notifications. To define an Email server profile, Add a profile and specify Email Notification Settings.
To select the Syslog Server profile for System, Config, User-ID, HIP Match, and Correlation logs, see Device > Log Settings.
To select the Syslog Server Profile For Traffic, Threat, Wildfire, URL Filtering, Data Filtering, Tunnel Inspection, Authentication, and GTP logs, see Objects > Log Forwarding.
You can also Monitor > PDF Reports > Email Scheduler.
You cannot delete a server profile that the firewall uses in any System or Config log settings or Log Forwarding profile.
Enter a name for the server profile (up to 31 characters). The name is case-sensitive and must be unique. Use only letters, numbers, spaces, hyphens, and underscores.
Enter a name to identify the server (up to 31 characters). This field is just a label and does not have to be the host name of an existing SMTP server.
Enter the name shown in the From field of the email.
Enter the From email address, such as security_alert@company.com.
Optionally, enter the email address of another recipient. You can only add one additional recipient. To add multiple recipients, add the email address of a distribution list.
Enter the IP address or host name of the Simple Mail Transport Protocol (SMTP) server used to send the email.
Click the log type to open a dialog box that allows you to specify a custom log format. In the dialog box, click a field to add it to the Log Format area. Click OK to save the settings.
Include escaped characters and specify the escape character or characters.