Palo Alto config with LEM

Hi All,

I'm new to both LEM and PA so looking to make sure I have the correct setup.  I've read the KB article SolarWinds Knowledge Base :: Integrating your Palo Alto Firewall with SolarWinds LEM and setup the PA accordingly.

My question is around the Log File matching the Facility - PA Facility is set to LOG_USER and in LEM I have configured the connector with /var/log/LOG_USER.log.  The preceding var/log were already there so I just put in the log_user, I've tried 'user' too but I'm not able to discover the new node or see any info.

Any pointers?  If you need more information just ask.  The PA is PA-500.

Cheers

lcfc