When is an event displayed under threat logs?
When is an event displayed under threat logs?
An event is displayed under threat logs when traffic matches a corresponding Security Profile. Security Profiles are used to identify various types of threats and attach them to security policy rules on the firewall. Only when the traffic matches these defined profiles do they get logged under the threat logs.
I think the A . A Threat log displays entries when the traffic matches one of the Security profiles attached to a Security policy rule on the firewall.
I think it's the A too
Found at: https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/monitoring/view-and-manage-logs/log-types-and-severity-levels/threat-logs#:~:text=Threat%20logs%20display%20entries%20when,security%20rule%20on%20the%20firewall.