| Both sides previous revisionPrevious revisionNext revision | Previous revision |
| paloaltonetworks:logs:syslog:routing [2020/06/04 07:51] – bstafford | paloaltonetworks:logs:syslog:routing [2022/11/23 12:49] (current) – external edit 127.0.0.1 |
|---|
| |
| ===== Critical ====== | ===== Critical ====== |
| <code>( subtype eq vpn ) and ( severity eq critical )</code> | <code>( subtype eq routing ) and ( severity eq critical )</code> |
| <code>( eventid eq path-monitor-failure ) and ( object eq default ) and ( description contains 'Path monitoring failed for static route destination 10.0.0.0/8 with next hop 0.0.0.0. Route removed.' )</code> | <code>( eventid eq path-monitor-failure ) and ( object eq default ) and ( description contains 'Path monitoring failed for static route destination 10.0.0.0/8 with next hop 0.0.0.0. Route removed.' )</code> |
| <code>( eventid eq path-monitor-recovery ) and ( object eq default ) and ( description contains 'Path monitoring for static route destination 10.0.0.0/8 with next hop 0.0.0.0 recovered. Route restored.' )</code> | <code>( eventid eq path-monitor-recovery ) and ( object eq default ) and ( description contains 'Path monitoring for static route destination 10.0.0.0/8 with next hop 0.0.0.0 recovered. Route restored.' )</code> |
| |
| ===== High ====== | ===== High ====== |
| <code>( subtype eq vpn ) and ( severity eq high )</code> | <code>( subtype eq routing ) and ( severity eq high )</code> |
| <code>( eventid eq routed-OSPF-neighbor-down ) and ( object eq name-of-vr ) and ( description contains 'OSPF adjacency with neighbor has gone down. interface ae1.2, neighbor router ID 10.1.1.1, neighbor IP address 10.2.2.2.' )</code> | <code>( eventid eq routed-OSPF-neighbor-down ) and ( object eq name-of-vr ) and ( description contains 'OSPF adjacency with neighbor has gone down. interface ae1.2, neighbor router ID 10.1.1.1, neighbor IP address 10.2.2.2.' )</code> |
| PAN-OS 9.0 | PAN-OS 9.0 |
| | |
| ===== Low ====== | ===== Low ====== |
| <code>( subtype eq vpn ) and ( severity eq low )</code> | <code>( subtype eq routing ) and ( severity eq low )</code> |
| <code>( eventid eq routed-BGP-peer-failed ) and ( object eq name-of-vr ) and ( description contains 'BGP peer session has failed and may restart. peer name: name-of-peer. peer IP: 169.254.11.11.' )</code> | <code>( eventid eq routed-BGP-peer-failed ) and ( object eq name-of-vr ) and ( description contains 'BGP peer session has failed and may restart. peer name: name-of-peer. peer IP: 169.254.11.11.' )</code> |
| <code>( eventid eq routed-BGP-peer-restarted ) and ( object eq name-of-vr ) and ( description contains 'Initiated graceful-restart with a BGP peer. peer name: name-of-peer. peer IP: 9.9.9.9.' )</code> | <code>( eventid eq routed-BGP-peer-restarted ) and ( object eq name-of-vr ) and ( description contains 'Initiated graceful-restart with a BGP peer. peer name: name-of-peer. peer IP: 9.9.9.9.' )</code> |
| |
| ===== Informational ====== | ===== Informational ====== |
| <code>( subtype eq vpn ) and ( severity eq informational )</code> | <code>( subtype eq routing ) and ( severity eq informational )</code> |
| <code>( eventid eq routed-fib-sync-self-master ) and ( description contains 'FIB HA sync started when local device becomes master.' )</code> | <code>( eventid eq routed-fib-sync-self-master ) and ( description contains 'FIB HA sync started when local device becomes master.' )</code> |
| <code>( eventid eq routed-config-p1-success ) and ( description contains 'Route daemon configuration load phase-1 succeeded.' )</code> | <code>( eventid eq routed-config-p1-success ) and ( description contains 'Route daemon configuration load phase-1 succeeded.' )</code> |