Which log type is supported in the Log Forwarding profile?

User-ID is a mapping technology, not a distinct log type that is directly selected for forwarding within a Log Forwarding profile.

While GlobalProtect generates various log events, 'GlobalProtect' itself is not a standalone log type listed for forwarding; its events are typically categorized under system or traffic logs.

Configuration logs track administrative changes, but they are generally managed as system logs and are not listed as an independent 'Configuration' log type within a Log Forwarding profile.

Tunnel logs, which record events related to VPN tunnels (e.g., IPSec, GlobalProtect), are a specific log type that can be selected and forwarded using a Log Forwarding profile. This allows administrators to send detailed VPN activity records to external SIEMs or log servers for monitoring and compliance.