How to Enable Logging in Palo Alto Default Policy

 Palo Alto has 2 default Security policies (Interzone-default and Intrazone-default)

By default, for both the default security policies, logging will be disabled. But, you can enable logging to the default rule manually.

Below are the two rules:

Select the rule for which you want to enable the logging and click on Override. Screenshot below reference.

Window opens as below. Navigate to Action and you can enable Logging at session End and click on Ok.

After making the changes, commit the changes as below.

Popup menu opens as below, Click on Commit, Once done, your config is saved.