These logs are on Panorama only. They should also exist on the firewall but they will be classed under

( subtype eq general) and ( severity eq informational )

( subtype eq monitoring) and ( severity eq informational )

( eventid eq deviating-device ) and ( description contains 'Deviating device: fw01, Serial: 012233445566, Object: interface 1/9, Metric: rx-pps-multicast, Value: 1' )

( eventid eq deviating-device ) and ( description contains 'Deviating device: fw01, Serial: 012233445566, Object: N/A, Metric: throughput, Value: 291' )

( eventid eq deviating-device ) and ( description contains 'Deviating device: fw01, Serial: 012233445566, Object: N/A, Metric: mp-mem, Value: 11' )

( eventid eq deviating-device ) and ( description contains 'Deviating device: fw01, Serial: 001122334455, Object: interface 1/1, Metric: packets-per-sec-transmit, Value: 1399' )

( eventid eq deviating-device ) and ( description contains 'Deviating device: fw01, Serial: 001122334455, Object: interface 1/1, Metric: packets-per-sec-receive, Value: 1414' )

( eventid eq deviating-device ) and ( description contains 'Deviating device: fw01, Serial: 001122334455, Object: interface 1/1, Metric: tx-pps-unicast, Value: 1399' )

( eventid eq deviating-device ) and ( description contains 'Deviating device: fw01, Serial: 001122334455, Object: interface 1/1, Metric: rx-pps-unicast, Value: 1414' )

( eventid eq deviating-device ) and ( description contains 'Deviating device: fw01, Serial: 001122334455, Object: interface 1/1, Metric: rx-bit-rate, Value: 865209' )

( eventid eq deviating-device ) and ( description contains 'Deviating device: fw01, Serial: 001122334455, Object: interface 1/1, Metric: tx-bit-rate, Value: 833736' )

( eventid eq deviating-device ) and ( description contains 'Deviating device: fw01, Serial: 001122334455, Object: s1 dp0, Metric: pps, Value: 4906' )

( eventid eq deviating-device ) and ( description contains 'Deviating device: fw01, Serial: 001122334455, Object: s1 dp0, Metric: cps, Value: 48' )

( eventid eq deviating-device ) and ( description contains 'Deviating device: fw01, Serial: 001122334455, Object: s1 dp0, Metric: dp-cpu, Value: 3' )

( eventid eq deviating-device ) and ( description contains 'Deviating device: fw01, Serial: 001122334455, Object: N/A, Metric: logging-rate, Value: 49' )

( eventid eq deviating-device ) and ( description contains 'Deviating device: fw01, Serial: 001122334455, Object: N/A, Metric: pps, Value: 4906' )

( eventid eq deviating-device ) and ( description contains 'Deviating device: fw01, Serial: 001122334455, Object: N/A, Metric: cps, Value: 48' )

( eventid eq deviating-device ) and ( description contains 'Deviating device: fw01, Serial: 001122334455, Object: N/A, Metric: throughput, Value: 26635' )

( eventid eq deviating-device ) and ( description contains 'Deviating device: fw01, Serial: 001122334455, Object: N/A, Metric: sessions, Value: 2174' )

( eventid eq deviating-device ) and ( description contains 'Deviating device: fw01, Serial: 001122334455, Object: N/A, Metric: mp-mem, Value: 44' )