topic Generate daily report in GlobalProtect Discussions

Generate daily report

Arielpa — Mon, 08 Mar 2021 09:09:47 GMT

hello,
is there a way I can generate a daily report on the number of users that connected daily.

thanks

Re: Generate daily report

Mick_Ball — Mon, 08 Mar 2021 14:22:43 GMT

I tend to send GP logs to syslog and run scripts to extract required info, I also have PRTG monitor for real time outputs but you can just use monitor/manage custom logs, select globalprotect log from the database and then select the requirement from query builder, perhaps the best for gateway connection would be "event id equal gateway-connected"

you can either run when it suits you or select "scheduled" and this will run every day and can be viewed in monitor/reports.

Re: Generate daily report

sebastianvd — Tue, 09 Mar 2021 14:11:48 GMT

Maybe you'll this, i have a script which detects the current and past logons of GP users on the firewalls found in Panorama.

You can find it over here: https://github.com/relaxteb/paloaltoscripts

I am not a programmer just an IT enthousiastic person 😉