topic Re: Source User (srcuser) Field not included when using API to retrieve traffic logs in Automation/API Discussions

Source User (srcuser) Field not included when using API to retrieve traffic logs

moxx.pascual — Tue, 10 Aug 2021 21:05:01 GMT

The source user (srcuser) field is not included in the columns retrieved when using API. Logtypes tested: url, threat, corr (correlated event)

Re: Source User (srcuser) Field not included when using API to retrieve traffic logs

JimmyHolland — Wed, 11 Aug 2021 08:44:58 GMT

Hi @moxx.pascual, I'm seeing the source user in the XML response for threat logs (example below). I am using 10.1.1 on my VM-Series. Maybe you can share the version of PAN-OS you are using?

Re: Source User (srcuser) Field not included when using API to retrieve traffic logs

moxx.pascual — Wed, 11 Aug 2021 09:05:05 GMT

Hi @JimmyHolland , our PAN OS version is 9.1.

Re: Source User (srcuser) Field not included when using API to retrieve traffic logs

JimmyHolland — Wed, 11 Aug 2021 09:29:19 GMT

Hi @moxx.pascual, can you provide the exact version please, 9.1.x? Thanks

Re: Source User (srcuser) Field not included when using API to retrieve traffic logs

JimmyHolland — Wed, 11 Aug 2021 10:46:59 GMT

I found a device on 9.1.x, and can confirm it works with VM-Series on 9.1.2: