Forum Discussion

MJorgensen's avatar
MJorgensen
Copper Contributor
Mar 04, 2021

log file from sonicwall to cloudapp security

Hi.
Just try to follow this articel:
https://kmartins.com/2018/03/07/configure-microsoft-cloud-app-security-to-analyze-sonicwall-logs/
To get my sonicwall to report syslog to cloud app security.

but we keeps getting this error in Governance Log:

"Log format does not match the expected format for SONICWALL_SYSLOG."

 

Any pointers of what can fix this?

5 Replies

  • cyeowell's avatar
    cyeowell
    Copper Contributor

    MJorgensen 

    Old post I know, but I thought I'd post the answer for anyone else searching.

    The SonicWall appliance must have the date log format set to UTC in the Device/System/Time settings

     

    Display UTC in logs (instead of local time) set to true

     

     

    • JR2021's avatar
      JR2021
      Brass Contributor
      THANK YOU SO MUCH

      I had the UTC in logs setting turned on, but it never even occurred to me to check the device time settings
      • JXG2300's avatar
        JXG2300
        Copper Contributor

        MoodyBES when exporting from Sonicwall, what format did you select? I only see CSV, TXT, Email. When importing into Microsoft Cloud Apps, did you select the default Sonicwall (from the drop down menu)?

Resources