topic Re: Greenfield ML Video - alternative other than use syslog in Expedition Discussions

Greenfield ML Video - alternative other than use syslog

Edwardo — Wed, 20 Jun 2018 21:14:19 GMT

Hello there,

I saw the video for ML - the features looks nice, however I am wonderinf is there are other alternatives other than send info via syslog or scp (as in video). I will like just to export it manually since I have my VM on my laptop and also directly from the device (in the future might have it directly connected).

Pleas let me know,

Thanks

Re: Greenfield ML Video - alternative other than use syslog

alestevez — Fri, 22 Jun 2018 10:35:32 GMT

Hi, you can export from the Firewall and import via SCP to your Expedition, or you can send from the firewall syslog to Expedition, you can schedule the log export to be executed every night by the firewall and automatilly upload the files to Expedition. You can do all but import from the Expedition GUI.

Re: Greenfield ML Video - alternative other than use syslog

Edwardo — Fri, 22 Jun 2018 13:26:01 GMT

Thank you for the information.

1- So just to be clear, I can manually add logs from Palo Alto to Expedition right?

2- What will be the best aproach to analyze a remote Palo Alto? I can connect via client VPN, or just go there one day. I have clients with Palo Altos I a mwondering if this tool can help me to automate the process of rule creation (ML) and best practices.

Thanks,

Re: Greenfield ML Video - alternative other than use syslog

alestevez — Fri, 22 Jun 2018 14:20:00 GMT

They can store the logs locally and then you need only access to the SSH server to copy the csv files to your lan. then analyze, or Install Expedition in each customer and do all from each customer network----

Re: Greenfield ML Video - alternative other than use syslog

Edwardo — Mon, 25 Jun 2018 20:19:13 GMT

Thanks for the information!