I would love to have something like "Monitor tab" on Palo Alto devices where I can go and search for specific traffic and verify if it was allowed or blocked (if blocked - by which firewall rule etc). I
Tried to setup Graylog as syslog server but making those logs being useful will require a lot of work. Anyone have some ready/out of the box solutions for it? I'm working for NGO now so it would be awesome to find free (or at least not very expensive) solution.