---
title: Palo Alto Firewall
description: Learn more about the Palo Alto Firewall pack.
breadcrumbs: Docs > Observability Pipelines > Packs > Palo Alto Firewall
---

> For the complete documentation index, see [llms.txt](https://docs.datadoghq.com/llms.txt).

# Palo Alto Firewall

## Overview{% #overview %}

{% image
   source="https://docs.dd-static.net/images/observability_pipelines/packs/palo_alto_firewall.ea7296a501c5f4a4a2865d63fe2120e9.png?auto=format&fit=max&w=850 1x, https://docs.dd-static.net/images/observability_pipelines/packs/palo_alto_firewall.ea7296a501c5f4a4a2865d63fe2120e9.png?auto=format&fit=max&w=850&dpr=2 2x"
   alt="The Palo Alto Firewall pack" /%}

Palo Alto firewall logs capture traffic, threat, and system events.

What this pack does:

- Keeps detections and enforcement logs
- Drops redundant and benign events
- Normalizes traffic, threat, and system fields

## Further Reading{% #further-reading %}

Additional helpful documentation, links, and articles:

- [Rehydrate archived logs in any SIEM or logging vendor with Observability Pipelines](https://www.datadoghq.com/blog/rehydrate-archived-logs-with-observability-pipelines)