topic Re: Configuration Log Report once a day? in General Topics

Configuration Log Report once a day?

ChrisEngstler — Fri, 25 Feb 2022 11:55:26 GMT

Hey Folks,

well i would like to forward Configuration Logs in a Daily Overview. Same like if i configure "Device --> Log Settings --> Configuration". But i don`t want to send every single entry, instead i would like to have a schedule for "config changes of last 24 hours".

Do you know if there is a possibility on this? As well in reporting section there seems not to be any option to report Config/System logs...

Would be great if anyone of you could help.

Christian

Re: Configuration Log Report once a day?

BPry — Fri, 25 Feb 2022 15:17:38 GMT

@ChrisEngstler,

Your best solution here would be setting up a free SIEM like Graylog and sending the configuration logs there, then having it report any configuration event in a report once a day. The firewall's ability to alert on configuration events is limited to when it happens and can't do a daily report.

Re: Configuration Log Report once a day?

ChrisEngstler — Wed, 02 Mar 2022 09:25:22 GMT

@BPry
Yeah thought so as well that there is a need of an additional tool. Just wanted to try everything to do it directly from PAN.. anyway i guess it would be an easy task to allow using the Config&System-Log Data for Reports aswell, unfortunatelly it is now available..

Thanks for your reply/help 🙂