topic Re: "Decrypted" column in exported CSV of Traffic log? in General Topics

"Decrypted" column in exported CSV of Traffic log?

BSwientoniowski — Mon, 11 Jul 2022 17:33:02 GMT

When viewing the Traffic Log in the GUI, there is a column for "Decrypted" (yes/no).

However when I export the Traffic Log to a CSV, I don't see a column with the same or a similar name.

How would I identify which connections were decrypted by looking at just the CSV file?

PavelK — Mon, 11 Jul 2022 22:26:25 GMT

after you export logs, you will see a column: "Flags", based on value you can determine whether session was decrypted. Further details are in KB: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm1JCAS

Kind Regards

Pavel

BSwientoniowski — Thu, 14 Jul 2022 18:42:33 GMT

Thank you Pavel!