An internal audit team has requested additional information to be included inside traffic logs forwarded from Palo Alto Networks firewalls to an internal syslog server. Where can the firewall…

Custom Log Formats, configured under `Device > Server Profiles > Syslog`, allow an administrator to define specific fields and their order to be included in syslog messages forwarded to an external server. This provides granular control over the content of forwarded logs.

Built-in Actions within a Log Forwarding Profile determine *which* logs are forwarded and to *which* server profile, not the specific content format of the log messages themselves.

Logging and Reporting Settings in `Device > Setup > Management` manage general logging parameters like log retention and quotas, but they do not customize the format or content of individual syslog messages.

Data Patterns within Custom Objects are used for content inspection to identify sensitive data or specific patterns in traffic, not for customizing the format of syslog messages.