# Palo Alto Networks Strata (syslog)

In this guide, you will configure Strata Logging Service to forward Palo Alto Firewall logs to Radiant Security through Syslog TLS.

### Add the data connector in Radiant Security

First, you’ll add the Palo Alto Networks Firewall data connector in Radiant Security to create a certificate that you’ll use to create the syslog server in Palo Alto.

1. Log in to [Radiant Security](https://app.radiantsecurity.ai/).
2. From the navigation menu, click **Settings** > **Data Connectors** and click **+ Add Connector**.
3. Search for and select the **Palo Alto Networks Strata (syslog)** option and then click **Data Feeds**.
4. Under **Select your data feeds**, select the **Palo Alto Networks Strata** data feed and then click **Credentials**.
5. Under **Credential Name**, give the credential an identifiable name (e.g. `PAN Strata Credentials`). If you already have a credential in place, select it from the drop-down menu.
6. In the **Connector tag** field, enter a random value. This value will act as the salt to randomize the unique **Token** you’ll download in the next step.
7. Click **Add Connector**.
8. Save the **Token** value or use the **Download** **Files** option to save the token file. This token will be used in the upcoming section **Configure log forwarding**.
9. Click **Done** to save your changes.

### Configure log forwarding

1. Access the Strata Logging service through the Palo Alto Networks Hub.
2. Select the **Strata Logging Service** instance that you want to configure for syslog forwarding.
3. Select **Log Forwarding**, then click **Add** to add a new Syslog forwarding profile.
4. Enter the following values:
   1. **Name**: Radiant Security Syslog Server
   2. **Syslog Server**: `cluster.syslog.radiantsecurity.ai`
   3. **Port**: `6514`
   4. **Facility**: `1 - LOG_USER / User Level`
5. Click **Test Connection**.
6. If the connection succeeds, click **Next**.
7. On **Format**, select **CSV.**
8. On **Delimiter**, select **comma**.
9. On **Profile Token**, enter the **Token** value that you created and copied from the previous section.
10. (Optional) Create a [log filter](https://docs.paloaltonetworks.com/strata-logging-service/administration/forward-logs/create-log-filters) to select which events and alerts should be forwarded
    1. The log filter uses a [query](https://docs.paloaltonetworks.com/strata-logging-service/administration/view-logs/retrieve-logs) to select which events should be forwarded.
11. Click **Save** and make sure the **Status** of the Syslog forwarding profile is set to **Running**.