topic Re: Scheduled Export logs in Expedition Discussions

Scheduled Export logs

stevenjwilliams83 — Thu, 11 Apr 2019 23:13:24 GMT

Can you change the name of the logs that are exported on the scheduled export? If you can export logs in 15 min intervals then the file name should change based on the 15 min right?

Re: Scheduled Export logs

dgildelaig — Fri, 12 Apr 2019 07:07:21 GMT

Expedition does not restrict the name.

If it has the standard name, it can directly identify the date it was generated.

If you are exporting every 15 minutes, only make sure that you do have different names for each file, otherwise they will overwrite each other.

I assume that you are exporting every 15 minutes because of the large size of the log files. Make sure as well that you will have space enough in your destination folder to host the number of files that you will require.

Re: Scheduled Export logs

stevenjwilliams83 — Fri, 12 Apr 2019 12:07:08 GMT

There is no option in the Scheduled export logs on the PanOS for defining a file name. So unless I write a script to rename files every 14 minutes it will always overwrite the last one exported.

Re: Scheduled Export logs

dgildelaig — Fri, 12 Apr 2019 19:09:31 GMT

Have you verified that PANOS does generate the same name for the export files?

I would assume that it generates the name to specify to which 15 minutes the logs belong to, but I may be mistaken.

Re: Scheduled Export logs

stevenjwilliams83 — Fri, 12 Apr 2019 19:29:21 GMT

Yes the log name is the same.

Looks like it only uses device name and date to name the file, so no time stamp in the name.

PA-5250-LOANER_traffic_2019_04_11_last_calendar_day.csv

Re: Scheduled Export logs

dgildelaig — Mon, 15 Apr 2019 07:06:43 GMT

Yes, you will have to rename the file each time.

I guess that you are already scripting the export task to be done every 15 minutes (as the firewall only allows a daily export).

In your script, try to rename any existing file in Expedition with today's name prior to download the next 15 minutes of logs.