{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/main/json-schema/palo-alto-networks-log-forwarding-profiles-schema.json",
  "title": "log-forwarding-profiles",
  "x-generated": "2026-10-04",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/palo-alto-networks-log-forwarding-profiles-api-openapi.yml#/components/schemas/log-forwarding-profiles",
  "type": "object",
  "required": [
    "name",
    "match_list"
  ],
  "properties": {
    "id": {
      "type": "string",
      "format": "uuid",
      "description": "The UUID of the log server profile",
      "readOnly": true
    },
    "name": {
      "type": "string",
      "description": "The name of the log forwarding profile",
      "maxLength": 63
    },
    "description": {
      "description": "Log forwarding profile description",
      "type": "string",
      "maximum": 255
    },
    "match_list": {
      "type": "array",
      "minItems": 1,
      "items": {
        "type": "object",
        "properties": {
          "name": {
            "description": "Name of the match profile",
            "type": "string",
            "maxLength": 63
          },
          "action_desc": {
            "description": "Match profile description",
            "type": "string",
            "maxLength": 255
          },
          "log_type": {
            "description": "Log type",
            "type": "string",
            "enum": [
              "traffic",
              "threat",
              "wildfire",
              "url",
              "data",
              "tunnel",
              "auth",
              "decryption",
              "dns-security",
              "gtp",
              "sctp"
            ]
          },
          "filter": {
            "description": "Filter match criteria",
            "type": "string",
            "maxLength": 65535
          },
          "send_http": {
            "description": "A list of HTTP server profiles",
            "type": "array",
            "items": {
              "type": "string"
            }
          },
          "send_syslog": {
            "description": "A list of syslog server profiles",
            "type": "array",
            "items": {
              "type": "string"
            }
          },
          "send_snmptrap": {
            "description": "A list of SNMP server profiles",
            "type": "array",
            "items": {
              "type": "string"
            }
          },
          "send_email": {
            "description": "A list of email server profiles",
            "type": "array",
            "items": {
              "type": "string"
            }
          }
        },
        "required": [
          "name",
          "log_type",
          "filter"
        ]
      }
    }
  },
  "oneOf": [
    {
      "type": "object",
      "title": "folder",
      "properties": {
        "folder": {
          "type": "string",
          "pattern": "^[a-zA-Z\\d\\-_\\. ]+$",
          "maxLength": 64,
          "description": "The folder in which the resource is defined"
        }
      },
      "required": [
        "folder"
      ]
    },
    {
      "type": "object",
      "title": "snippet",
      "properties": {
        "snippet": {
          "type": "string",
          "pattern": "^[a-zA-Z\\d\\-_\\. ]+$",
          "maxLength": 64,
          "description": "The snippet in which the resource is defined"
        }
      },
      "required": [
        "snippet"
      ]
    },
    {
      "type": "object",
      "title": "device",
      "properties": {
        "device": {
          "type": "string",
          "pattern": "^[a-zA-Z\\d\\-_\\. ]+$",
          "maxLength": 64,
          "description": "The device in which the resource is defined"
        }
      },
      "required": [
        "device"
      ]
    }
  ]
}